Email Phishers Using New Way to Bypass Microsoft Office 365 Protections

Phishing works no matter how hard a company tries to protect its customers or employees. Security researchers have been warning of a new phishing attack that cybercriminals and email scammers are using in the wild to bypass the Advanced Threat Protection ATP mechanism implemented by widely used...

Delta Electronics CNCSoft and ScreenEditor Stack Buffer Overflow Vulnerability

Delta Electronics CNCSoft and ScreenEditor are products of Delta Electronics, a CNC machine simulation system software and ScreenEditor, a HMI programming software. A stack buffer overflow vulnerability exists in Delta Electronics CNCSoft version 1.00.83 and earlier and ScreenEditor version...

Black Hat 2018: Cortana Flaw Allowed Takeover of Locked Windows 10 Device

LAS VEGAS – Researchers sounded the security alarm here at Black Hat over issues tied to voice control – specifically with the Windows Cortana service. On Wednesday they outlined a flaw patched in June by Microsoft dubbed “Open Sesame” that allowed an adversary to bypass a Windows 10 lock screen...

Multiple vulnerabilities in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE

Overview EC-CUBE Payment Module and GMO-PG Payment Module PG Multi-Payment Service, which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. Cross-site scripting vulnerability in the management screen CWE-79 - CVE-2018-0657 Inp...

Microsoft Windows: Turn off app notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlockscreenappnotifications.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off app notifications on the lock screen Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Do not display network selection UI

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkselectionui.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Do not display network selection UI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

PT-2018-2939

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to weaknesses in the screen lock mechanism of the operating system. Exploitation of this issue may allow an attacker to bypass the lock screen and gain access to...

Denial of service

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

CVE-2018-7934

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

CVE-2018-7934

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

Hacking the Bitfi. Part 1

A large number of security researchers have taken exception to the ‘unhackable’ claims made by Bitfi and John McAfee about the security of their hardware cryptocurrency wallet. The $100K bounty offered appears to be something of sham, given it covers a very, very specific scenario. Bitfi states...

PT-2018-18334

Name of the Vulnerable Software and Affected Versions: Huawei mobile phone versions prior to 8.0.0.145C432 Description: The issue is related to a denial of service DoS problem due to the device's inability to handle specific screen gestures. This could allow an attacker to trick users into...

CVE-2018-7934: Improper Input Validation

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

DEBIAN-CVE-2017-12164

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...

CVE-2017-12164

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...

Denial of Service Vulnerability in Softmedia Rubik's Cube Software

Softmedia Tweak Cube tweakcube is a new generation of optimization master produced by Softmedia, the world's first system software certified by the official Microsoft Windows 7 logo, a number of top domestic awards, is now the first domestic user volume of Vista Optimizer and Windows 7 Optimizer ...

July 24, 2018—KB4338817 (OS Build 16299.579)

None None...

CVE-2018-14415

An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen...

KingCloud Antivirus v2.4.2.39 Personal Edition hookbody.sys driver has a denial of service vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus software for personal end devices launched by Tatsunobuilder. hookbody.sys is a kernel mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the hookbody.sys driver of KingCloud Antivirus...

PT-2018-9679

Name of the Vulnerable Software and Affected Versions: MicroWorld eScan Internet Security Suite ISS for Business version 14.0.1400.2029 Description: The issue allows a non-privileged user to cause a denial of service, resulting in a Blue Screen of Death BSOD, by sending a specific IOCTL request t...