KB4088782: Windows 10 Version 1703 March 2018 Security Update

The remote Windows host is missing security update 4088782. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry. An attacker who successfully exploited this...

Linux kernel kernel security protection bypass vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A kernel security protection bypass vulnerability exists in the fdlockedioctl function in drivers/block/floppy.c in...

UBUNTU-CVE-2018-7755

An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...

Schneider Electric IGSS SCADA Software Local Code Execution Vulnerability

Schneider Electric IGSS SCADA Software is a shared service platform for SCADA Data Acquisition and Supervisory Control systems from Schneider Electric France. A security vulnerability exists in Schneider Electric IGSS SCADA Software version 12 and earlier, which stems from incorrect security...

Microsoft Windows kernel local information disclosure vulnerability (CNVD-2018-05062)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the operating system kernels. An information disclosure vulnerability exists in the Microsoft Windows kernel. An attacker can exploit this vulnerability by logging on to an...

Security feature bypass

A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization ASLR and Data Execution prevention DEP were not properly configured resulting in weak security...

CVE-2017-9967

A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization ASLR and Data Execution prevention DEP were not properly configured resulting in weak security...

PCI DSS v3.2 & Private IP Address Disclosure

Private IP addresses disclosure such as QID 86247 “Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability” will be marked as a Fail for PCI as of February 1, 2018 in accordance with PCI DSS v3.2. QID 86247 is a PCI Fail according to PCI DSS v3.2 Requirement 1.3.7: 1.3.7 Do...

Meltdown and Spectre

Cisco Talos is aware of three new vulnerabilities impacting Intel, AMD, Qualcomm and ARM processors used by almost all computers. We are investigating these issues and although we have not observed exploitation of these vulnerabilities in the wild, that does not mean that it has not occurred. We...

Microsoft Windows Color Management Module Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Color Management Module Icm32.dll is one of these color management modules. An information disclosure vulnerability exists in Color Management Module Icm32.dll in Microsoft Windows 7 SP1, Windows Serv...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2018-00521)

Microsoft Windows 7 SP1 and others are products of Microsoft Corporation in the United States. Microsoft Windows 7 SP1 is an operating system for personal computers; Windows Server 2008 SP2 is a server operating system. kernel is a kernel used in it. An information disclosure vulnerability exists...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-00517)

Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. kernel is one of the kernels. Server...

Fixing the Meltdown and Spectre vulnerabilities

Two days ago, Graz University of Technology published a paper describing a pair of attacks on common microprocessors. The underlying vulnerability affects Intel, AMD, and ARM processors. All contemporary microprocessors pre-execute instructions. In other words, the vulnerability bypasses address...

Microsoft Windows Multiple Vulnerabilities (KB4056899)

This host is missing an important security update according to Microsoft KB4056899 OpenVAS Vulnerability Test $Id: gbmskb4056899.nasl 8364 2018-01-10 16:59:46Z gveerendra $ Microsoft Windows Multiple Vulnerabilities KB4056899 Authors: Shakeel Copyright: Copyright C 2018 Greenbone Networks GmbH,...

KB4056890: Windows 10 Version 1607 and Windows Server 2016 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056890 or 4057142. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...

KB4056899: Windows Server 2012 January 2018 Security Update

The remote Windows host is missing security update 4056899 or cumulative update 4056896. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory...

Linux Kernel Information Disclosure Vulnerability (CNVD-2018-00596)

The Linux Kernel is the kernel of the Linux operating system. Linux kernel 3.3-rc1 and later have an information disclosure vulnerability in their implementation that can be exploited by an attacker to bypass KASLR security restrictions...

Linux Kernel - 'mincore()' Heap Page Disclosure (PoC)

/ The source is modified from https://bugs.chromium.org/p/project-zero/issues/detail?id=1431 I try to find out infomation useful from the infoleak The kernel address can be easily found out from the uninitialized memory leaked from kernel, which can help bypass kaslr / define GNUSOURCE include...

CVE-2017-16371

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaScript engine. In this scenario, t...

Clarifying the behavior of mandatory ASLR

Last week, the CERT/CC published an advisory describing some unexpected behavior they observed when enabling system-wide mandatory Address Space Layout Randomization ASLR using Windows Defender Exploit Guard WDEG and EMET on Windows 8 and above. In this blog post, we will explain the configuratio...