Eaton 9000X Drive Buffer Overflow Vulnerability

The Eaton 9000X Drive is an American Eaton inverter with integrated data logger functionality that allows multiple drives to be monitored simultaneously. A stack buffer overflow vulnerability exists in Eaton 9000X Drive version 2.0.29 and prior versions, which can be exploited by remote attackers...

Eaton 9000X Drive

1. EXECUTIVE SUMMARY CVSS v3 5.6 ATTENTION: Exploitable remotely Vendor: Eaton Equipment: 9000X Drive Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...

CoinHive URL Shortener Abused to Secretly Mine Cryptocurrency Using Hacked Sites

Security researchers have been warning about a new malicious campaign that leverages an alternative scheme to mine cryptocurrencies without directly injecting the infamous CoinHive JavaScript into thousands of hacked websites. Coinhive is a popular browser-based service that offers website owners...

Obfuscated Coinhive shortlink reveals larger mining operation

During the past several months, in-browser mining has continued to affect a large number of websites, predominantly relying on Coinhive's infamous API. We documented several campaigns on this blog, in particular Drupalgeddon, where attackers are taking advantage of vulnerabilities in popular...

Restrictions Dialog Prompt When Launch Apps

When you launch the published apps in Japanese OS, the following “Restrictions Dialog” may appear if the policy of "Prevent access to drives from My Computer" enabled...

Microsoft OneDrive installer untrustworthy search path vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. installer is an installer for OneDrive. An untrustworthy search path vulnerability exists in the installer in Microsoft OneDrive. An attacker...

Microsoft Windows: Allow indexing of encrypted files

This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing will attempt to decrypt and index the content access restrictions will still apply. If you disable this policy setting, the search service components including non-Microsoft components are expect...

Microsoft Windows: Do not allow drive redirection

This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session drive redirection. By default, an RD Session Host server maps client drives automatically upon connection. Mapped drives appear in the session folder tree in File Explorer or Compute...

Microsoft Windows: Configure use of passwords for operating system drives

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winosdrivespassword.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of passwords for operating system drives Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Hardware-based encryption for OS drives (allowed algorithms)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winosrestrictcrypto.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Configure use of hardware-based encryption for operating system drives: Restrict crypto algorithms or cipher suites to the following Authors:...

Microsoft Windows: Use of hardware-based encryption (removable data drives)

This policy setting allows you to manage BitLocker Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Microsoft Windows: Require additional authentication at startup (TPM startup PIN)

This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with or without a Trusted Platform Module TPM. This policy setting is applied when you turn on BitLocker. Note: Only one of the...

Microsoft Windows: Use of hardware-based encryption for OS drives

This policy setting allows you to manage BitLocker Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Microsoft Windows: BitLocker-protected operating system drives recovery

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winosbitlockerrecovery.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected operating system drives can be recovered Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Require additional authentication at startup (TPM startup key)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winaddauthtpmstartupkey.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup: Configure TPM startup key Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Microsoft Windows 10: Drive encryption method and cipher strength (Windows 10)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winencrmethodcipherstrength.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Choose drive encryption method and cipher strength Windows 10 Version 1511 and later Authors: Emanuel Moss Copyright: Copyright c 2018...

Microsoft Windows 10: Disable new DMA devices when this computer is locked

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windmadeviceslocked.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Disable new DMA devices when this computer is locked Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Use of smart cards on removable data drives

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmconfiguresmartcards.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of smart cards on removable data drives Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Require additional authentication at startup

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadditionalauthstartup.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows: Require passwords for fixed data drives

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdfixeddrives.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of passwords for fixed data drives Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...