CVE-2016-6898

XML external entity XXE vulnerability in the Hyper Management Module HMM in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service web service outage via a crafted XML document...

PT-2016-7156

Name of the Vulnerable Software and Affected Versions Huawei E9000 rack servers with software before V100R001C00SPC296 Description The issue is related to an XML external entity XXE vulnerability in the Hyper Management Module HMM. This allows remote authenticated users to read arbitrary files or...

CVE-2016-6898: Improper Access Control

XML external entity XXE vulnerability in the Hyper Management Module HMM in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service web service outage via a crafted XML document...

MS16-100: Description of the security update for Secure Boot: August 9, 2016

None None...

MS16-100: Security update for Secure Boot: August 9, 2016

Resolves a vulnerability in Windows that could allow security feature bypass if an attacker installs an affected boot manager and bypasses Windows security features.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass if ...

MGASA-2016-0259 Updated VirtualBox 5.1 packages fix security vulnerability

This update provides the new VirtualBox 5.1 series, currently based on 5.1.2 providing several perfomance enhancements The highlights include: VMM: new APIC and I/O APIC implementations that result in significantly improved performance in certain situations for example with networking VMM: activa...

multi-OS restore fails on Hyper-V 2008R2

To restore individual files and folders from file systems other than Microsoft Windows, you can use the multi-OS File-Level Restore wizard. To restore files from VM guest OS, Veeam Backup & Replic...

Linux kernel KVM Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KVM Kernel-based Virtual Machine is a virtualization infrastructure used in it. A denial of service vulnerability exists in Linux kernel KVM. An attacker can exploit this vulnerability ...

RUSTSEC-2016-0002 HTTPS MitM vulnerability due to lack of hostname verification

When used on Windows platforms, all versions of Hyper prior to 0.9.4 did not perform hostname verification when making HTTPS requests. This allows an attacker to perform MitM attacks by preventing any valid CA-issued certificate, even if there's a hostname mismatch. The problem was addressed by...

aerial (0.1.0), afterparty (0.1.0) +338 more potentially affected by CVE-2016-10932 via hyper (>=0.0.1, <=0.8.1)

hyper CARGO version =0.0.1, =0.7.0, =0.1.0, =0.1.3, =0.5.1, =0.1.2, =0.5.3, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2016-10932 Source advisory: OSV:RUSTSEC-2016-0002...

HTTPS MitM vulnerability due to lack of hostname verification

When used on Windows platforms, all versions of Hyper prior to 0.9.4 did not perform hostname verification when making HTTPS requests. This allows an attacker to perform MitM attacks by preventing any valid CA-issued certificate, even if there's a hostname mismatch. The problem was addressed by...

PT-2016-4588

Name of the Vulnerable Software and Affected Versions hyper crate versions prior to 0.9.4 Description An issue was discovered in the hyper crate for Rust on Windows, allowing an HTTPS man-in-the-middle attack because hostname verification was omitted. This enables an attacker to perform MitM...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created...

Hyper-V - vmswitch.sys VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688 This function is reachable by sending a RNDIS Set request with OID 0x01010209 OID8023MULTICASTLIST from the Guest to the Host. This function potentially allocates a buffer...

Hyper-V - vmswitch.sys VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

Hyper-V - vmswitch.sys VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688 This function is reachable by sending a RNDIS Set request with OID 0x01010209 OID8023MULTICASTLIST from the Guest to the Host. This...

Hyper-V - 'vmswitch.sys' VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688 This function is reachable by sending a RNDIS Set request with OID 0x01010209 OID8023MULTICASTLIST from the Guest to the Host. This function potentially allocates a buffer based on the addresses sent. The number of entries is...

Release Notes for Veeam Management Pack 8.0 Update 2

Challenge Release Notes for Veeam Management Pack 8.0 Update 2. Cause Please confirm you are running Veeam Management Pack 8.0 prior to installing this update. You can check this in Operations Manager console under Administration | Management Packs, the build number should be 8.0.0.2218 or later...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems from Microsoft.Hyper-V is one of the virtualization products. A remote code execution vulnerability exists in Hyper-V for Microsoft Windows due to the program failing to properly validate authenticated user input on a guest operating system. An...