13572 matches found
openSUSE Security Update : mailman (openSUSE-2019-495)
This update for mailman to version 2.1.27 fixes the following issues : This security issue was fixed : - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed : - The hash generated when...
openSUSE Security Update : git-annex (openSUSE-2019-497)
This update for git-annex to version 6.20180626 fixes the following issues : - CVE-2018-10857: Prevent file content disclosure by refusing to download content that cannot be verified with a hash, from encrypted special remotes and glacier bsc1098062. - CVE-2018-10859: Prevent local gpg encrypted...
Cybersecurity Teardown: Using Hash Values
Welcome to the final installment of Hash Values in our greater Cybersecurity Teardown series. In today's post, we'll cover the 'How' of hash values - which includes: Traiging alerts for deeper research Investigating an issue for malicious activity Reassembling our previous examples within a CB...
Cybersecurity Teardown: Benefit of Hash Values
Welcome to the second part in our Hash Values series of the Cybersecurity Teardown. Today, we'll be covering: How hashing could provide a valuable benefit A real-world example and explanation at work The results of our hashing This is the second part of a three-part series. Be sure to check back...
Hashboy-Tool - A Hash Query Tool
Hashboy was redeveloped onhash-buster Author:Leiothrix How to install $git clone https://github.com/sf197/hashboy-tool $cd hashboy-tool $python3 hashboy.py How to use $ python3 hashboy.py / / / / / / / / / / / / / / / / / / / / // / / / // / // / // / // //,/// //.//, / // Author:Leiothrix...
CVE-2018-12190
creationtimestamp| type| source ---|---|--- 2019-03-14 23:20:10+00:00| seen| https://t.me/cibsecurity/3142...
Cybersecurity Teardown: Understanding Hash Values
We just started a new series called “Cybersecurity Teardown.” In this series, we’ll be ripping apart ideas and attacks, then reassembling them with a Carbon Black mindset. Each idea or attack will be broken down into three phases: What, Why, and How. In this first entry, I wanted to call your...
Improper access control
Thinkst Canarytokens through commit hash 4e89ee0 2019-03-01 relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token...
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An elevation of privilege vulnerability exists in Active Directory Forest trusts because of a default setting that lets an attacker in the trusting forest...
openssl security update
1.0.2k-16.0.1.el76.1 - Bump release for rebuild. 1.0.2k-16.1 - use SHA-256 in FIPS RSA pairwise key check - fix CVE-2018-5407 - EC signature local timing side-channel key extraction 1.0.2k-16 - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix incorrect error message on...
Description of the security update for SharePoint Foundation 2013: March 12, 2019
Description of the security update for SharePoint Foundation 2013: March 12, 2019 Summary This security update resolves a cross-site-scripting XSS vulnerability if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn mo...
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system arises from the use of unstable cryptographic hash functions for storing Unix passwords. This allows a hacker to gain unauthorized access to the system.
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system is related to the use of unstable cryptographic hash functions for storing Unix passwords. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory. To learn more about the vulnerability...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An information disclosure vulnerability exists in the manner in which the Windows SMB Server handles certain requests. To learn more about the vulnerability, g...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary A remote code execution vulnerability exists when Internet Explorer incorrectly accesses objects in memory. To learn more about the vulnerability, go to...
Description of the security update for the remote code execution vulnerabilities in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the remote code execution vulnerabilities in Windows Embedded POSReady 2009: March 12, 2019 Summary Remote code execution vulnerabilities exists when the Microsoft XML Core Services MSXML parser processes user input and in the way that the VBScript engine...
Description of the security update for the information disclosure vulnerabilities in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the information disclosure vulnerabilities in Windows Embedded POSReady 2009: March 12, 2019 Summary Information disclosure vulnerabilities exist when the Windows GDI component incorrectly discloses the contents of its memory. To learn more about the...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An information disclosure vulnerability exists when the Human Interface Devices HID component incorrectly handles objects in memory. To learn more about the...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An information disclosure vulnerability exists when the Windows kernel incorrectly handles objects in memory. To learn more about the vulnerability, go to...
Cross-Site Scripting (XSS)
sharrre is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via location hash to steal session tokens or perform unwanted actions on behalf of the user...