CVE-2016-8229

CVE-2016-8229 refers to a cross-site request forgery in Lenovo Service Bridge (LSB) on Windows, in versions before 4. The vulnerability could be exploited by an attacker who has access to the DHCP server used by the system running LSB. Public details in the connected documents confirm the affecte...

CVE-2016-8230

Lenovo Service Bridge (LSB.exe) on Windows is affected by CVE-2016-8230 due to an insecure HTTP connection used by LSB to transmit system serial number, machine type and model to Lenovo servers on versions prior to 4. The root cause is unencrypted data transmission. Impact described in sources in...

CVE-2016-8231

In CVE-2016-8231, Lenovo Service Bridge prior to version 4 contains a flaw in the signature verification logic of code signing certificates that could allow a forged certificate to be accepted. Affected product: Lenovo Service Bridge (LSB) on Windows. Root cause: incorrect/weak signature verifica...

PT-2017-9544

Name of the Vulnerable Software and Affected Versions Lenovo Service Bridge versions prior to 4 Description A cross-site request forgery issue exists that could be exploited by an attacker with access to the DHCP server used by the system where the software is installed. Recommendations For...

PT-2017-9545

Name of the Vulnerable Software and Affected Versions Lenovo Service Bridge versions prior to 4 Description The issue concerns the use of an insecure HTTP connection by Lenovo Service Bridge to send sensitive system information, including system serial number, machine type and model, and product...

PT-2017-9546

Name of the Vulnerable Software and Affected Versions Lenovo Service Bridge versions prior to 4 Description A bug was found in the signature verification logic of the code signing certificate in Lenovo Service Bridge, which could be exploited by an attacker to insert a forged code signing...

CVE-2016-8228

In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...

CVE-2016-8231

In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate...

Metasploit Wrapup

It has only been one week since the last wrapup, so it's not like much could have happened, right? Wrong! Misery Loves Company After last week's excitement with Metasploit's version of ETERNALBLUE AKA the Wannacry vulnerability, this week SAMBA had its own "Hold My Beer" moment with the disclosur...

Lenovo Service Bridge Contains Privilege Escalation and Other Vulnerabilities - us

Lenovo Security Advisory: LEN-10149 Potential Impact: Local privilege escalation, cross-site request forgery, insecure connection, possibility to insert a forged code signing certificate Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8228, CVE-2016-8229, CVE-2016-8230,...

CVE-2016-8722

Affected product: Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Component: Web Application functionality. Vulnerability: Information disclosure via unauthenticated access to specific URLs (e.g., /asqc.asp and /acqc.asp) which can reveal sensitive device informatio...

CVE-2016-8722

An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without authentication can reveal sensitive information to an attacker...

Unspecified Cross-Site Scripting Vulnerability in HP Operations Bridge Analytics

HP Operations Bridge Analytics is a suite of intelligent solutions from Hewlett-Packard in the United States that provide operational analytics automation and simplify IT service delivery and digital innovation, among other capabilities. A cross-site scripting vulnerability exists in HP Operation...

Moxa AWK-3131A Web Application Nonce Reuse Vulnerability

Summary An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds. Teste...

Moxa AWK-3131A Web Application asqc.asp Information Disclosure Vulnerability

Moxa AWK-3131A Web Application asqc.asp Information Disclosure Vulnerability Summary An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without...

MacOS/iOS kernel heap overflow in bpf (CVE-2017-2482)

The bpf ioctl BIOCSBLEN allows userspace to set the bpf buffer length: case BIOCSBLEN: / uint / if d-bdbif != 0 error = EINVAL; else uint size; bcopyaddr, &size, sizeof size; if size bpfmaxbufsize size = bpfmaxbufsize; else if size bdbufsize = size; break; d-bdbif is set to the currently attached...

Apple macOS/iOS Kernel 10.12.3 (16D32) - 'bpf' Heap Overflow

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1125 The bpf ioctl BIOCSBLEN allows userspace to set the bpf buffer length: case BIOCSBLEN: / uint / if d-bdbif != 0 error = EINVAL; else uint size; bcopyaddr, &size, sizeof size; if size bpfmaxbufsize size = bpfmaxbufsize; else ...

HPESBGN03721 rev.1 - HPE Operations Bridge Analytics, Remote Cross-Site Scripting (XSS)

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - Operations Bridge Analytics v3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5800 |...

CVE-2017-3837

An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server CMS, formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the...

Design/Logic Flaw

An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server CMS, formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the...