2183 matches found
Deserialization Of Untrusted Data
Apache ActiveMQ allows for deserialization of objects both in the Broker and in any applications which process ObjectMessage messages, specifically by using ObjectMessagegetObject. Broker deserialization happens in HTTP, Stop, Web Console, and other components. The deserialization in versions 5.0...
TAU Threat Intelligence Notification: Djvuu Ransomware
Summary Djvuu ransomware is believed to be a newer variant of the “Stop” ransomware strain, which was seen circulating in the early part of 2018. There are also similarities to the Goren-B trojan originally reported by Sophos back in 2016. Djvuu is likely to be delivered through phishing e-mail...
CVE-2017-18353
Rendertron 1.0.0 includes an ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application...
PT-2018-6848
Name of the Vulnerable Software and Affected Versions: Rendertron version 1.0.0 Description: The issue allows any unauthorized remote attacker to disable the core service of the application by visiting the " ah/stop" API endpoint with a GET request. This endpoint is used to shutdown the Chrome...
CVE-2017-18353: Undefined Security Weakness
Rendertron 1.0.0 includes an ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application...
openSUSE: Security Advisory for openssh (openSUSE-SU-2018:3946-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Windows 8.1 and Server 2012 R2 KB4345424 Update
The remote Windows host is missing update 4345424. This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: - Addressed issue in which some devices may experience stop error 0xD1 when you run network monitoring workloads...
CVE-2018-17935
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...
CVE-2018-17935
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...
Command injection
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...
CVE-2018-13115
Lack of an authentication mechanism in KERUI Wifi Endoscope Camera YPC99 allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user...
PT-2018-11611
Name of the Vulnerable Software and Affected Versions KERUI Wifi Endoscope Camera YPC99 affected versions not specified Description The issue concerns a lack of authentication in the KERUI Wifi Endoscope Camera, allowing unauthorized access to watch or block the camera stream. Specifically, the...
Belkin Wemo-Enabled Crock-Pot Remote Control
This module acts as a simple remote control for Belkin Wemo-enabled Crock-Pots by implementing a subset of the functionality provided by the Wemo App. No vulnerabilities are exploited by this Metasploit module in any way. This module requires Metasploit: https://metasploit.com/download Current...
CVE-2018-3669
A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...
Design/Logic Flaw
A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...
CVE-2018-3669
A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...
CVE-2018-3669: Undefined Security Weakness
A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...
PT-2018-16119
Name of the Vulnerable Software and Affected Versions Intel Centrino Wireless N and Intel Centrino Advanced N adapters affected versions not specified Description A STOP error in the ibtfltcoex.sys driver may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request t...
Intel® Centrino® Wireless-N and Intel® Centrino® Advanced-N products Bluetooth Driver Advisory
Summary: A potential security vulnerability in ibtfltcoex.sys driver for Intel® Centrino® Wireless adapters may allow denial of service. Vulnerability Details: CVEID: CVE-2018-3669 Description: A STOP error BSoD in the ibtfltcoex.sys driver for Intel® Centrino® Wireless N and Intel® Centrino®...
