HPESBST03882 rev.1 - HPE Command View Advance Edition (CVAE) using JDK, Local and Remote Authentication Bypass

Potential Security Impact: Local: Authentication Bypass; Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP7 Command View Advanced Edition Suite all CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-2940 |...

Partner Perspectives: Protecting Against Fileless Malware with BluVector and Carbon Black

Josh Rosenthol is the Alliance and Integration Manager for BluVector. The Challenge of Fileless Malware “The infectiousness of crime is like that of the plague.” -Napoleon Bonaparte While first spoken over 200 years ago, this quote is remarkably relevant to the modus operandi of malware authors a...

naprawaglosnikow.pl XSS vulnerability

Open Bug Bounty ID: OBB-677367 Description| Value ---|--- Affected Website:| naprawaglosnikow.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

betexa.cz XSS vulnerability

Open Bug Bounty ID: OBB-677154 Description| Value ---|--- Affected Website:| betexa.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kasandra.com.pl XSS vulnerability

Open Bug Bounty ID: OBB-676678 Description| Value ---|--- Affected Website:| kasandra.com.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8440

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC, aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

Design/Logic Flaw

A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...

beethovenandcompany.com XSS vulnerability

Open Bug Bounty ID: OBB-675661 Description| Value ---|--- Affected Website:| beethovenandcompany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

johnsoninteriors.com XSS vulnerability

Open Bug Bounty ID: OBB-674604 Description| Value ---|--- Affected Website:| johnsoninteriors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bangkok925.com XSS vulnerability

Open Bug Bounty ID: OBB-674544 Description| Value ---|--- Affected Website:| bangkok925.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235. A local...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...

mrkrave.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-673955 Description| Value ---|--- Affected Website:| mrkrave.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation

Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation / Exploit Title: Cisco Umbrella Roaming Client 2.0.168 - Privilege Escalation Date: 2018-04-06 Exploit Author: paragonsec @ Critical Start Vendor Homepage: https://www.opendns.com/ Version: Umbrella Roaming Client 2.0.168 Tested o...

Cisco Umbrella Roaming Client 2.0.168 - Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title: Cisco Umbrella Roaming Client 2.0.168 - Privilege Escalation Exploit Author: paragonsec @ Critical Start Vendor Homepage: https://www.opendns.com/ Version: Umbrella Roaming Client 2.0.168 Tested on: Windows 10 Professional C...

Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation

/ Exploit Title: Cisco Umbrella Roaming Client 2.0.168 - Privilege Escalation Date: 2018-04-06 Exploit Author: paragonsec @ Critical Start Vendor Homepage: https://www.opendns.com/ Version: Umbrella Roaming Client 2.0.168 Tested on: Windows 10 Professional CVE : CVE-2018-0437 & CVE-2018-0438 Cisc...

OilRig Sends an OopsIE to Mideast Government Targets

The OilRig group is back, using a reboot of the OopsIE trojan to pump information from its favorite resource: entities in the Middle East region. OilRig, which is also called Cobalt Gypsy, Crambus, Helix Kitten or PT34, is suspected of having ties to Iran. The group was identified in 2015 and is...

Windows Defender Advanced Threat Protection Installed (Windows)

Binary data microsoftwindowsdefenderadvancedthreatprotectionwininstalled.nbin...

jahanbazar.com XSS vulnerability

Open Bug Bounty ID: OBB-672944 Description| Value ---|--- Affected Website:| jahanbazar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...