PT-2018-18907

Name of the Vulnerable Software and Affected Versions Twonky Server versions prior to 8.5.1 Description The issue allows for XSS via a folder name on the Shared Folders screen. Recommendations For versions prior to 8.5.1, update to version 8.5.1 or later to resolve the issue...

CVE-2018-4239: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

CVE-2018-10198: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets...

Social Media Privacy Dominates Apple iOS 12, macOS Launches

Social media privacy is top of mind for Apple on the heels of the Facebook-Cambridge Analytica controversy. On Monday, Apple released the latest versions of its desktop and mobile operating systems at the Worldwide Developers Conference WWDC, which addresses a bevy of security and privacy concern...

Apple iOS Siri Permissions Vulnerability (CNVD-2018-12172)

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Siri is a voice control component. A security vulnerability exists in the Siri component of Apple iOS prior to version 11.4. An attacker in close physical proximity could use Siri to bypass the lock screen...

Apple iOS Magnifier Permission Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and Magnifier is one of the screen magnification components. A security vulnerability exists in the Magnifier component in Apple iOS versions prior to 11.4. An attacker in close physical proximity could exploit this...

Apple iOS Siri Permissions Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Siri is a voice control component. A security vulnerability exists in the Siri component in Apple iOS versions prior to 11.4. An attacker in close physical proximity could exploit this vulnerability to bypass th...

Microsoft Windows: Interactive logon: Machine inactivity limit

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmachineinactivitylimit.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Machine inactivity limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Input validation

An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen...

Cybozu Mailwise Cross-Site Scripting Vulnerability

Cybozu Mailwise is a Web-based e-mail system from Cybozu, and E-mail Details Screen is one of the components for viewing e-mail details. A cross-site scripting vulnerability exists in E-mail Details Screen in Cybozu Mailwise versions 5.0.0 through 5.4.1. A remote attacker can use this vulnerabili...

2345 Security Guard 3.7 2345NsProtect.sys Denial Of Service

Exploit Title: BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7 Date: 20180513 Exploit Author: anhkgg Vendor Homepage: http://safe.2345.cc/ Software Link: http://dl.2345.cc/2345pcsafe/2345pcsafev3.7.0.9345.exe Version: v3.7 REQUIRED Tested on: Windows X64 CVE : CVE-2018-...

CVE-2018-11035

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x80002019...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10962)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345NsProtect.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

IIJ SmartKey App for Android vulnerable to authentication bypass

Overview IIJ SmartKey App for Android contains an authentication bypass vulnerability. IIJ SmartKey App for Android provided by Internet Initiative Japan Inc. is an application that enables two-step authentication two-factor authentication for a website from an Android device. IIJ SmartKey App fo...

JVN#27137002: IIJ SmartKey App for Android vulnerable to authentication bypass

IIJ SmartKey App for Android provided by Internet Initiative Japan Inc. is an application that enables two-step authentication two-factor authentication for a website from an Android device. IIJ SmartKey App for Android contains an authentication bypass vulnerability CWE-287. Impact An attacker m...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-09485)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

CVE-2018-8060

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. Th...

CVE-2018-8060

HWiNFO AMD64 Kernel driver (version 8.98 and earlier) is affected. An unprivileged user can send an IOCTL to the device driver, and if input/output buffers are NULL or data is invalid, a NULL/invalid pointer access occurs, causing a Windows kernel panic (BSOD). Affected IOCTLs are higher than 0x8...

PT-2018-10131

Name of the Vulnerable Software and Affected Versions 2345 Security Guard version 3.7 Description The issue is related to the driver file 2345BdPcSafe.sys in the X64 version, which does not validate input values from IOCtl 0x002220e0. This can allow local users to cause a denial of service,...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10964)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCtl...