FreeBSD : bro -- array bounds and potential DOS issues (d0be41fe-2a20-4633-b057-4e8b25c41780)

Corelight reports : Bro 2.5.5 primarily addresses security issues : - Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...

bro -- array bounds and potential DOS issues

Corelight reports: Bro 2.5.5 primarily addresses security issues: Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...

HackerOne: DOM Based XSS in www.hackerone.com via PostMessage

Summary: The Marketo contact form available on the www.hackerone.com website is affected by a cross-site scripting vulnerability, caused by an insecure 'message' event listener installed on the page. Whilst this could allow an attacker to execute JavaScript in the context of the www.hackerone.com...

Microsoft Windows: Audit Audit Policy Change

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winauditpolicychange.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Audit Policy Change Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Logon

Audit Logon determines whether the operating system generates audit events when a user attempts to log on to a computer. These events are related to the creation of logon sessions and occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was...

Microsoft Windows: Audit Computer Account Management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincomputeraccountmanagement.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Computer Account Management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Audit Security State Change

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsecuritystatechange.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Security State Change Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...

Microsoft Windows: Audit Other Logon/Logoff Events

Audit Other Logon/Logoff Events determines whether Windows generates audit events for other logon or logoff events. These other logon or logoff events include: - A Remote Desktop session connects or disconnects. - A workstation is locked or unlocked. - A screen saver is invoked or dismissed. - A...

Detect Evil Maid Attacks: Do Not Disturb

Physical access or “evil maid” attacks are some of the most insidious threats faced by those of us who travel with our Macs. Do Not Disturb DND is a free, open-source utility that aims to detect and alert you of such attacks! One of the best ways to compromise a computer is with physical access...

Atmosphere 1.x / 2.x Cross Site Scripting Vulnerability

Async-IO.org Atmosphere suffers from a cross site scripting vulnerability. Versions affected include 2.4.0 through 2.4.28, 2.3.0 through 2.3.9, 2.2.0 through 2.2.12, 2.1.0 through 2.1.13, 2.0.0 through 2.0.11, and 1.0.0 through 1.0.20. COMPASS SECURITY ADVISORY...

CVE-2018-8373

creationtimestamp| type| source ---|---|--- 2018-08-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=316 2018-08-16 05:48:34+00:00| seen| MISP/5b75100d-54dc-420e-8c2f-5667ac100a5a 2018-08-20 19:07:25+00:00| seen| MISP/5b7b1061-8fd4-417a-84d7-23d2ac12042b 2018-09-26...

CVE-2018-0732

creationtimestamp| type| source ---|---|--- 2018-08-14 20:19:25+00:00| seen| https://t.me/ctinow/967 2024-01-15 14:11:37+00:00| seen| https://t.me/ctinow/168354...

CVE-2018-3110

creationtimestamp| type| source ---|---|--- 2018-08-13 13:58:10+00:00| seen| https://t.me/SecLabNews/2888 2018-08-15 05:28:00+00:00| seen| https://t.me/informationsecuritychannel/19396 2018-08-17 09:00:38+00:00| seen| https://t.me/sysodmins/3212...

Fighting the Skills Gap Via Industry Leading Research and Inspiring Events

By Kevin Simzer Among the headline-grabbing reports of election hacking, nation-state raids on utilities firms, and mega-data breaches, few outside the industry ask the question: Did the cybersecurity skills shortage play a part? It’s impossible to say for sure. However, what we do know is that...

CVE-2018-5925

creationtimestamp| type| source ---|---|--- 2018-08-07 13:24:09+00:00| seen| https://t.me/informationsecuritychannel/19165 2018-08-07 16:01:28+00:00| seen| https://t.me/SecLabNews/2846 2018-08-14 20:00:09+00:00| seen| https://t.me/sysodmins/3177...

Microsoft Windows: Enable/Disable PerfTrack

This policy setting specifies whether to enable or disable tracking of responsiveness events. If you enable this policy setting, responsiveness events are processed and aggregated. The aggregated data will be transmitted to Microsoft through SQM. Ff you disable this policy setting, responsiveness...

CVE-2018-14311

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

CVE-2018-14311

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...