UBUNTU-CVE-2018-16658

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940...

CVE-2018-7754

The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file...

CVE-2018-7754

The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file...

Security Bulletin: A security vulnerability in OpenSSL affects IBM Rational ClearQuest (CVE-2018-0739)

Summary OpenSSL vulnerabilities were disclosed on March 27 2018 by the OpenSSL Project. OpenSSL is used by IBM Rational ClearQuest. IBM Rational ClearQuest has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-0739 DESCRIPTION: OpenSSL is vulnerable to a denial of service. By...

The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges through a specially...

NVIDIA Linux GPU Display Driver Multiple Vulnerabilities

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111107; scriptversion"1.5";...

PT-2018-3532 · Apple +6 · Ios +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13 iOS versions prior to 11.4 Android versions prior to the 2018-06-05 patch Description: The issue is related to incorrect validation of cryptographic signatures in Bluetooth drivers for Android, macOS, and iOS...

Query Windows Machine for RAM Artifacts: memtriage

Allows you to quickly query a live Windows machine for RAM artifacts. This tool utilizes the Winpmem drivers to access physical memory, and Volatility for analysis. Caveats: Doesn’t work with Device Guard enabled. Should be tested on machines before deploying. Example Usage usage: memtriage.exe -...

XML External Entity (XXE) Injection

onos-drivers-utilities is vulnerable to XML external entitiy XXE injection attacks. The application does not disable document type declarations DTD, allowing a malicious user can inject external entities through the loadxml function in XmlConfigParser.java...

CVE-2018-5838

Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger...

texasadultdriverseducation.com XSS vulnerability

Open Bug Bounty ID: OBB-640053 Description| Value ---|--- Affected Website:| texasadultdriverseducation.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Synaptics Keyboard & Touchpad Driver Running Arbitrary Code - US

Lenovo Security Advisory: LEN-19151 Potential Impact: Execution diversion – launching arbitrary code within the user’s context Severity: Low Scope of Impact: Industry-wide CVE Identifier: TBD, Summary Description: An attacker who has already obtained access to a user’s account could attach an...

texasadultdriverseducation.com XSS vulnerability

Open Bug Bounty ID: OBB-638580 Description| Value ---|--- Affected Website:| texasadultdriverseducation.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

texasadultdriverseducation.com XSS vulnerability

Open Bug Bounty ID: OBB-637910 Description| Value ---|--- Affected Website:| texasadultdriverseducation.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Prevent installation of devices (device setup classes)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windenydriverssetupclasses.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent installation of devices using drivers that match these device setup classes Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbon...

Microsoft Windows: Boot-Start Driver Initialization Policy

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winbootstartdriverinitialization.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Boot-Start Driver Initialization Policy Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Turn off downloading of print drivers over HTTP

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windownloadprintdriverhttp.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off downloading of print drivers over HTTP Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-12633

An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with copyfromuser. The header part of the user data is double-fetched, and a malicious user thread can tamper with the critical variables...

CVE-2018-0373

A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for Windows Desktop could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to improper...

RF Fuzzing Framework: TumbleRF

TumbleRF is a framework that orchestrates the application of fuzzing techniques to RF systems. While fuzzing has always been a powerful mechanism for fingerprinting and enumerating bugs within software systems, the application of these techniques to wireless and hardware systems has historically...