CVE-2018-19527

i4 assistant 7.85 allows XSS via a crafted machine name field within iOS settings...

Input validation

Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2018-3621

Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2018-3621

CVE-2018-3621 is an Intel advisory vulnerability affecting the Intel Driver & Support Assistant prior to 3.6.0.4. The issue is due to insufficient input validation, which could allow an unauthenticated user to potentially disclose information via adjacent access. Affected product: Intel Driver & ...

Intel® Driver & Support Assistant Advisory

Summary: A potential security vulnerability in the Intel® Driver & Support Assistant may allow information disclosure. Intel is releasing Driver & Support Assistant updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3621 Description: Insufficient input...

Lenovo Smart Assistant Factory Test Mode - Lenovo Support US

No description provided...

Intel Driver and Support Assistant Privilege License and Access Control Issues Vulnerability

Intel Driver and Support Assistant is an Intel driver and support management tool from Intel Corporation USA. The tool is mainly used to get the latest applications provided by Intel. A vulnerability exists in the Intel Driver and Support Assistant due to privilege-granting and access control...

Privilege escalation

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

CVE-2018-12148: Privilege escalation in Intel® Driver & Support Assistant before 3.5.0.1 may allow an authenticated user to execute code as administrator via local access. Affected software: Intel® Driver & Support Assistant (DSA). Root cause: privilege-granting/access control issues enabling loc...

Intel® Driver & Support Assistant and Intel® Software Asset Manager Advisory

Summary: Potential security vulnerabilities in Intel® Driver & Support Assistant, Intel® Software Asset Manager and Intel® Computing Improvement Program may allow escalation of privilege. Intel is releasing Intel® Driver & Support Assistant updates to mitigate these potential vulnerabilities...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8.0 used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in April 2018. Vulnerability Details CVEID: CVE-2018-2790 DESCRIPTION: An unspecified vulnerability...

Security Bulletin: IBM Support Assistant is affected by a WebSphere Application Server vulnerability

Summary IBM Support Assistant has addressed the vulnerability in WebSphere Application Server affecting installations using Form Login. Vulnerability Details CVEID: CVE-2017-1788 DESCRIPTION: IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conducts...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server (CVE-2014-6457)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 1.7.0 that is used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in October 2014. One of these vulnerabilities affects the IBM Support...

Making Expect scripts for SSH Authentication and Privilege Elevation

Expect can help you to automate interactive console applications. For example, expect script can go to some Linux host via SSH with password authentication, make additional authentication procedures su, sudo to elevate privileges and execute some commands. Like Vulnerability and Compliance...

Cisco Network Assistant Denial of Service Vulnerability

Cisco Network Assistant CNA is cisco launched an enterprise-class Cisco switch graphical interface management tool, which can be used to configure Cisco devices, such as: Catalyst switches, PIX firewalls, IP phones, and wireless access points, etc., CNA are supported as long as the face of small...

Cisco Network Assistant 6.3.3 Denial Of Service

Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-27 Vendor Homepage: https://www.cisco.com/ Software Link : https://software.cisco.com/download/home/286277276/type/280775097/release/6.3.3 Tested Version: 6.3.3...

Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service (PoC)

Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-27 Vendor Homepage: https://www.cisco.com/ Software Link : https://software.cisco.com/download/home/286277276/type/280775097/release/6.3.3 Tested Version: 6.3.3...