PT-2018-12225

Name of the Vulnerable Software and Affected Versions MusicCenter / Trivum Multiroom Setup Tool versions prior to V9.34 build 13381 Description The issue allows unauthorized remote attackers to reset authentication via the "/xml/system/setAttribute.xml" API endpoint, using a GET request with...

Microsoft Windows #MicrosoftWindows POP/MOV SS Local Privilege Elevation Exploit

This Metasploit module exploits a vulnerability in a statement in the system programming guide of the Intel 64 and IA-32 architectures software developer's manual being mishandled in various operating system kernels, resulting in unexpected behavior for DB exceptions that are deferred by MOV SS o...

Microsoft Windows - POP/MOV SS Local Privilege Elevation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...

[SECURITY] [DLA 1407-1] mariadb-10.0 security update

Package : mariadb-10.0 Version : 10.0.35-0+deb8u1 CVE ID : CVE-2017-10268 CVE-2017-10378 CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668 CVE-2018-2755 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2787 CVE-2018-281...

PT-2018-18394

Name of the Vulnerable Software and Affected Versions: Apache Qpid Broker-J versions 7.0.0 through 7.0.4 Apache Qpid Broker-J versions prior to 7.1.0 Description: A Denial of Service issue was found when using AMQP protocols 0-8, 0-9, or 0-91 to publish messages with a size greater than the allow...

Threat Roundup for June 1-15

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 01 and June 15. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristic...

Microsoft Windows 10: Service: Windows Push Notifications System Service

This service runs in session 0 and hosts the notification platform and connection provider which handles the connection between the device and WNS server. C 2019 Service Defaults. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

CVE-2017-7822: Undefined Security Weakness

The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox 56...

CVE-2018-4990 Adobe Reader code execution exploit analysis-exploit warning-the black bar safety net

2018 5 on 15 September, ESET released the article“A tale of two zero-days”, the article disclosed this year 3 month ESET in malware scan engine VirusTotal on the capture of the one used to attack the test PDF document. The PDF document contains a sample of two pieces of 0-day Vulnerability,...

Appnitro MachForm < 4.2.3 Multiple Vulnerabilities

Appnitro MachForm is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

CVE-2018-11517

mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010...

AIX 7.2 TL 0 : variant4 (IJ05821) (Spectre)

https://vulners.com/cve/CVE-2018-3639 https://vulners.com/cve/CVE-2018-3639 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory variant4advisory.asc. include'compat.inc'; if description scriptid109953; scriptversion"1.12";...

Microsoft Windows Kernel 'Win32k.sys' Local Privilege Escalation Vulnerability(CVE-2018-8120)

作者：bigric3 作者博客： 5月15日ESET发文其在3月份捕获了一个 pdf远程代码执行（cve-2018-4990）+windows本地权限提升（cve-2018-8120）的样本。ESET发文后，我从vt上下载了这样一份样本（）。初步逆向，大致明确如外界所传，该漏洞处于开发测试阶段，不慎被上传到了公网样本检测的网上，由ESET捕获并提交微软和adobe修补。测试特征字符串如下 定位样本中关键的代码并调试分析...

Libuser roothelper Privilege Escalation Exploit

This Metasploit module attempts to gain root privileges on Red Hat based Linux systems, including RHEL, Fedora and CentOS, by exploiting a newline injection vulnerability in libuser and userhelper versions prior to 0.56.13-8 and version 0.60 before 0.60-7. This Metasploit module makes use of the...

Office 365 in the 0-day vulnerability baseStriker appear in the wild examples of the use-vulnerability warning-the black bar safety net

5 October 1, Avanan the researchers found that Office 365 appears in a named baseStriker of 0-day vulnerabilities. An attacker can exploit this vulnerability to send malicious mail, bypassing the Office 365 account security mechanisms. ! baseStriker vulnerability of the code to use the less...

[SECURITY] [DLA 1371-1] tzdata new upstream release

Package : tzdata Version : 2018e-0+deb7u1 This update includes the changes in tzdata 2018e. Notable changes are: - North Korea switches back to +09 on 2018-05-05. For Debian 7 "Wheezy", these problems have been fixed in version 2018e-0+deb7u1. We recommend that you upgrade your tzdata packages...

brm-suggest-0.brsrvr.com XSS vulnerability

Open Bug Bounty ID: OBB-610633 Description| Value ---|--- Affected Website:| brm-suggest-0.brsrvr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-4140

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a Class 0 SMS message...

CVE-2018-4140: NULL Pointer Dereference

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a Class 0 SMS message...

PT-2018-16429

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3 Description The issue involves the Telephony component and allows remote attackers to cause a denial of service via a Class 0 SMS message, resulting in a NULL pointer dereference and reboot. Recommendations For iOS...