IBM Storwize for Lenovo initialization USB drives contain malware - us

Lenovo Security Advisory: LEN-14957 Potential Impact: Malware infection on system used to launch initialization tool Severity: Medium Summary Description: Some USB flash drives containing the initialization tool shipped with the IBM Storwize for Lenovo V3500, V3700 and V5000 Gen 1 storage systems...

LNK Code Execution Vulnerability

This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain a dynamic icon, loaded from a malicious DLL. This vulnerability is a variant of MS15-020 CVE-2015-0096. The created LNK file is similar except an additional SpecialFolderDataBlock is included. The...

Intel Solid State Drive Toolbox Local Elevation of Privilege Vulnerability

Intel Solid State Drive Toolbox is a driver management software from Intel USA for browsing SSD Solid State Drive information. A local elevation of privilege vulnerability exists in Intel Solid State Drive Toolbox versions prior to 3.4.5. A local attacker could exploit this vulnerability to load...

haltonhonda.com XSS vulnerability

Vulnerable URL: http://www.haltonhonda.com/new/book-a-test-drive/?vehicleid=8293418"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerabili...

CVE-2017-4897

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this...

CVE-2017-5688

There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...

CVE-2017-5688

CVE-2017-5688 concerns Intel Solid State Drive Toolbox. The vulnerability affects Toolbox versions prior to 3.4.5 and enables a local, high-privilege attacker to load and execute arbitrary code. The issue is described as a local elevation of privilege; exploitation details are not provided in the...

CVE-2017-5688

There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...

CVE-2017-4897: Improper Input Validation

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this...

PT-2017-16673

Name of the Vulnerable Software and Affected Versions Intel Solid State Drive Toolbox versions prior to 3.4.5 Description The issue allows a local administrative attacker to escalate privileges, enabling them to load and execute arbitrary code. Recommendations For versions prior to 3.4.5, update ...

CVE-2017-5688: Undefined Security Weakness

There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...

Intel® Solid State Drive Toolbox™ Escalation of Privilege Vulnerability

Summary: There is an escalation of privilege vulnerability in the Intel® Solid State Drive Toolbox™ versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code. Description: There is an escalation of privilege vulnerability in the Intel® Solid State Drive...

Oracle VirtualBox Guest Additions 5.1.18 - Unprivileged Windows User-Mode Guest Code Double-Free

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1227 We have discovered a heap double-free vulnerability in the latest version of VirtualBox 5.1.18, with Guest Additions and more specifically shared folders enabled in the guest operating system. The heap memory corruption take...

Enable BitLocker on secondary drive causes Receiver installation to be corrupted

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. On a machine with Microsoft BItlocker data encryption on a secondary drive, while receiver is...

CVE-2017-5873

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...

Windows PowerShell LLMNR/NBNS spoofer: Inveigh

Windows PowerShell LLMNR/NBNS spoofer Inveigh is a Windows PowerShell LLMNR/NBNS spoofer designed to assist penetration testers that find themselves limited to a Windows system. This can commonly occur while performing phishing attacks, USB drive attacks, VLAN pivoting, or simply being restricted...

How to configure Google Drive access from Receiver for Chrome

By enabling access to Google Drive from Receiver for Chrome, your users can seamlessly use existing Windows-based applications for example, Microsoft Word on a Chromebook and access the files residing on Google Drive.For example, if a user saves a file to Google Drive for instance, a .DOC file...

PVS Targets run chkdsk at boot after the vDisk has been modified

Every time a PVS Target Device boots from a vDisk the OS detects problems with the C: drive and automatically runs chkdsk at boot time. The following events might be observed in the Windows Event Log on the Target Device: Event Log: System Source: Ntfs Event ID: 55 Text: The file system structure...

CVE-2016-8768: Undefined Security Weakness

Huawei Honor 6, Honor 6 Plus, Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code to crash the system or escalate privilege...

Still Getting Served: A Look at Recent Malvertising Campaigns Involving Exploit Kits

Malvertising occurs when an online advertising network knowingly or unknowingly serves up malicious advertisements on a website. Malvertisements are a type of “drive-by” threat that tend to result in users being infected with malware for simply visiting a website. The victims of this threat are...