Description of the security update for Office 2010: November 12, 2019

Description of the security update for Office 2010: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...

Description of the security update for SharePoint Enterprise Server 2013: November 12, 2019

None None...

Prima FlexAir Access Control 2.3.35 Database Backup Predictable Name

!/usr/bin/env python -- coding: utf8 -- Prima FlexAir Access Control 2.3.35 Database Backup Predictable Name Exploit Authentication Bypass Login with MD5 hash CVE: CVE-2019-7666, CVE-2019-7667 Advisory: https://applied-risk.com/resources/ar-2019-007 Paper:...

FlexAir Access Control 2.3.35 - Authentication Bypass Exploit

Exploit for hardware platform in category web applications Exploit Title: FlexAir Access Control 2.3.35 - Authentication Bypass Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/...

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: October 8, 2019

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: October 8, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include the following: Improves the Secure Boot revocation list DBX update...

TYPO3 Encryption Problem Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.3.4 and 4.4.x prior to 4.4.1. An attacker can exploit the vulnerability to brute-force hash values...

Servicing stack update for Windows 10, version 1709: November 12, 2019

None None...

Servicing stack update for Windows 10, version 1507: November 12, 2019

None None...

FlexAir Access Control 2.3.35 - Authentication Bypass

Exploit Title: FlexAir Access Control 2.3.35 - Authentication Bypass Google Dork: NA Date: 2019-11-11 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/ Version: 2.3.35 Tested on: NA...

Servicing stack update for Windows 10, version 1903: November 12, 2019

None None...

Servicing stack update for Windows 10, version 1803: November 12, 2019

None None...

Servicing stack update for Windows 10, version 1809: November 12, 2019

None None...

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: November 12, 2019

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your...

Medtronic Valleylab FT10 and FX8

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Medtronic Equipment: Valleylab FT10, Valleylab FX8 Vulnerabilities: Use of Hard-coded Credentials, Reversible One-way Hash, Improper Input Validation 2. RISK EVALUATION Successful exploitation of...

Servicing stack update for Windows Server 2012: November 12, 2019

Servicing stack update for Windows Server 2012: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system before...

CVE-2009-5049

creationtimestamp| type| source ---|---|--- 2019-11-06 22:28:19+00:00| seen| https://t.me/cibsecurity/7938...

python: Missing salt initialization in _elementtree.c module

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

CVE-2010-3670

TYPO3 prior to 4.3.4 and 4.4.x prior to 4.4.1 contains insecure randomness during the generation of a hash in the forgot‑password function, enabling potential predictability of hashes as described in multiple sources (GHSA/NVD/CNVD/etc.). The vulnerability affects the forgot-password hashing proc...

TYPO3 Security Feature Issue Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security signature issue vulnerability exists in the 'uniqid' function in TYPO3, which can be exploited by an attacker to brute-force hash values...