USN-3882-1 curl vulnerabilities

Wenxiang Qian discovered that curl incorrectly handled certain NTLM authentication messages. A remote attacker could possibly use this issue to cause curl to crash, resulting in a denial of service. This issue only applied to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10. CVE-2018-16890...

Razer Synapse 3 Windows client local to mention the right vulnerability analysis-vulnerability warning-the black bar safety net

A, vulnerability introduction Razer Synapse（Ray cloud software installed in the system a service Razer Synapse Service, the service to NT AUTHORITY\SYSTEM permissions to run 会加载C:\ProgramData\Razer\目录中的多个.NET assembly. C:\ProgramData\Razer\and its subdirectories/files in the permissions aspect is...

KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation

KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation Exploit Title : KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation Date : 10/12/2018 Exploit Author : Hashim Jawad - @ihack4falafel Vendor Homepage : https://www.kioware.com/ Tested on : Windows...

PT-2018-2876

Name of the Vulnerable Software and Affected Versions Страж NT affected versions not specified Description The issue is related to incorrect data handling from a named pipe in the management console GManager.exe of the Страж NT information protection system. This could allow a local attacker to...

PT-2018-2875

Name of the Vulnerable Software and Affected Versions Stраж NT affected versions not specified Description The issue is related to incorrect input data processing in the 'служба команд' GCSvc.exe service of the Страж NT system, which can lead to a denial of service when exploited by a local...

PT-2018-2877

Name of the Vulnerable Software and Affected Versions Strazh NT affected versions not specified Description The issue is related to a lack of access control to file system objects in the Strazh NT information protection system driver. This could allow a local attacker to gain access to file syste...

PT-2018-2871

Name of the Vulnerable Software and Affected Versions Strazh NT affected versions not specified Description The issue is related to the incorrect implementation of Address Space Layout Randomization ASLR in the GShell.dll library of the Strazh NT information protection system. This could allow a...

PT-2018-2872

Name of the Vulnerable Software and Affected Versions Strazh NT affected versions not specified Description The issue is related to the lack of authentication mechanisms in critical functions of the Strazh NT information protection system. This could allow a local attacker to access the file syst...

PT-2018-2873

Name of the Vulnerable Software and Affected Versions Strazh NT affected versions not specified Description The issue is related to insufficient access control to file system object attributes. An attacker, acting locally, can exploit this to gain unauthorized access to file system object...

PT-2018-2874

Name of the Vulnerable Software and Affected Versions Strazh NT affected versions not specified Description The issue is caused by a buffer overflow in memory, which can be exploited by a local attacker to cause a denial of service. This occurs when the system attempts to process a file path that...

PT-2018-2878

Name of the Vulnerable Software and Affected Versions Guard.sys affected versions not specified Description The issue is related to a flaw in the algorithm for calculating the checksum of the LOGON INFO structure in the Guard.sys driver, part of the information protection system from unauthorized...

DEBIAN-CVE-2018-8789

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

CVE-2018-8789

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

Directory traversal

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server...

CVE-2018-19666

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server...

CVE-2018-19666

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server...

CVE-2018-19666: Improper Limitation of a Pathname to a Restricted Directory

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server...

PT-2018-15037

Name of the Vulnerable Software and Affected Versions OSSEC versions through 3.1.0 Description The issue allows local users to gain NT AUTHORITYSYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server. Recommendations For OSSEC versions through 3.1.0, update ...

Adobe Acrobat DC 2015 Information Disclosure Vulnerability (APSB18-40) - Mac OS X

Adobe Acrobat DC 2015 is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Making CVE-1999-0016 (landc) vulnerability detection script for Windows NT

The fair question is why in 2018 someone might want to deal with Windows NT and vulnerabilities in it. Now Windows NT is a great analogue of DVWA Damn Vulnerable Web Application, but for operating systems. There are a lot of well-described vulnerabilities with ready-made exploits. A great tool fo...