Black Hat USA 2019 Preview

Las Vegas – Despite bizarre reports of a grasshopper infestation, Black Hat USA 2019 and DEF CON are set to kick off next week in Las Vegas, bringing on a wave of sessions, keynotes and security-themed villages. The Threatpost team, which will be on the frontlines of next week’s shows, discuss wh...

HP Support Assistant < 8.8 Multiple Vulnerabilities

The version of HP Support Assistant installed on the remote Windows host is prior to 8.8. It is, therefore, affected by two unspecified privilege escalation vulnerabilities. An authenticated, local attacker can exploit this, to gain system level access to the system. C Tenable Network Security,...

The vulnerability of the HP Support Assistant software, a centralized device management tool, stems from deficiencies in access control. This allows attackers to obtain system privileges and perform unauthorized changes to catalogs or files.

The vulnerability of the HP Support Assistant software for centralized device management is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain system privileges and perform unauthorized changes to catalogs or files...

Security Bulletin: Multiple vulnerabilities affect IBM Watson Assistant for IBM Cloud Pak for Data

Summary Multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Node.js™, and OpenSSL as used by Node.js affect IBM Watson™ Assistant for IBM Cloud Pak for Data. Vulnerability Details CVEID: CVE-2018-12547 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a buffer overflow, caused by improper...

HP Support Assistant elevation of privilege vulnerability (CNVD-2019-23306)

HP Support Assistant is a utility program included in all HP computers to diagnose technical problems and manage updates. An elevation of privilege vulnerability exists in HP Support Assistant 8.7.50 and earlier versions. An attacker could use this vulnerability to gain system privileges and make...

CVE-2019-6328

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

CVE-2019-6328

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

CVE-2019-6329

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328...

CVE-2019-6329

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328...

Code injection

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

CVE-2019-6329

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328...

CVE-2019-6329

CVE-2019-6329 is a local privilege escalation affecting HP Support Assistant 8.7.50 and earlier. The connected exploit repository details a chain: when the user triggers the HP.SupportFramework.ServiceManager interface RunAnalysis, HPSAObjUtil8.exe runs with SYSTEM privileges and modifies permiss...

CVE-2019-6328

CVE-2019-6328 affects HP Support Assistant 8.7.50 and earlier. Connected exploit details describe a local privilege escalation via the HP Support Framework service: the HPSAObjUtil8 component changes permissions of XML files under C:\ProgramData\Hewlett-Packard\HP Support Framework\Logs\Temp\HPSA...

CVE-2019-6328

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329...

HPSBGN03620 rev. 4 - HP Support Assistant Escalation of Privilege Vulnerability

Potential Security Impact Elevation of privilege and unauthorized modification of directories or files. Source: HP, HP Product Security Response Team PSRT Reported by: Philippe Laulheret McAfee Advanced Threat Research, ManhNDd Bkav Corporation VULNERABILITY SUMMARY The vulnerability allows a use...

The vulnerability of the software for updating Intel Driver & Support Assistant, related to access control deficiencies, allows a hacker to disclose protected information.

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

The software’s vulnerability regarding driver updates for Intel Driver & Support Assistant, due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The software for updating Intel Driver & Support Assistant has a vulnerability due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Apple Mac OS X - Feedback Assistant Race Condition (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X Feedback Assistant Race Condition', 'Description' = %q This module exploits a race condition vulnerability in Mac's Feedback Assistant. ...

Mac OS X Feedback Assistant Race Condition Exploit

This Metasploit module exploits a race condition vulnerability in Mac's Feedback Assistant. A successful attempt would result in remote code execution under the context of root. This module requires Metasploit: https://metasploit.com/download Current source:...

Intel Driver & Support Assistant Access Control Error Vulnerability

Intel Driver & Support Assistant is an Intel driver and support management tool from Intel Corporation USA. The tool is mainly used to get the latest applications provided by Intel. An access control error vulnerability exists in Intel Driver & Support Assistant. The vulnerability arises from a...