CVE-2017-10892

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10892

CVE-2017-10892 affects Music Center for PC version 1.0.00. It is an untrusted search path vulnerability that can allow an attacker to gain privileges by placing a Trojan DLL in an directory that is searched during execution of the installer or related components. The issue is documented across mu...

Intel Patches CPU Bugs Impacting Millions of Devices

Intel released patches on Monday to protect millions of PCs and servers from vulnerabilities found in its Management Engine, Trusted Execution Engine and Server Platform Services that could allow local attackers elevate privileges, run arbitrary code, crash systems and eavesdrop on communications...

How can I tell if my PC is infected?

4 signs your PC might be infected with malware – by Brook Stein, Director of Product Management Years ago, computer hackers would brag about how many PCs they infected as a means of showing off their programming skills. They created newsworthy viruses with names like the "ILOVEYOU" or “Anna...

JVN#08517069: The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries

Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the...

pc-driver.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-401603 Description| Value ---|--- Affected Website:| pc-driver.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerabl...

Memory Corruption Vulnerability in Youku PC Player (CNVD-2017-35557)

Youku PC Player is video player software for Youku.com. A memory corruption vulnerability exists in YoukuNplayer.exe of Youku P Player when parsing special vob video files, which can be exploited by attackers to cause a denial of service or code execution...

Memory corruption vulnerability exists in Sohu Video 5 (CNVD-2017-35531)

Sohu Video 5 is a video player from Sohu. A memory corruption vulnerability exists in the Sohu Video 5 PC client when opening certain mov files, which can be exploited by attackers to cause a denial of service or code execution...

Memory Corruption Vulnerability in Storm Video 5 PC Client

Storm Video 5 is a video player from Beijing Storm Technology Co. Storm Video 5 PC client when opening specific 3gp files = A memory corruption vulnerability exists, which can be exploited by attackers to cause a denial of service...

online-pc.ru XSS vulnerability

Open Bug Bounty ID: OBB-359046 Description| Value ---|--- Affected Website:| online-pc.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Russian Hacker Exploits GTA 5 PC Mod to Install Cryptocurrency Miner

By Waqas Gamers were delighted with the release of world’s second most This is a post from HackRead.com Read the original post: Russian Hacker Exploits GTA 5 PC Mod to Install Cryptocurrency Miner...

arp.de XSS vulnerability

Vulnerable URL: https://www.arp.de/lenovo-s510-10kw-002v-tower-pc-top-10kw002vge-5'%22%3E%3Cimg%20src=x%20onerror=alert'OPENBUGBOUNTY'%3E%3C!-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Microsoft Office SMB Information Disclosure

Vulnerability Summary The following advisory describes an information disclosure found in Microsoft Office versions 2010, 2013, and 2016. Microsoft Office is: “Whether you’re working or playing, Microsoft is here to help. We’re the company that created Microsoft Office, including Office 365 Home,...

WEM 4.3 -Folder redirection discrepancy between "Quick Access" and "This PC"

When configuring WEM USV Settings for folder redirection inside WEM Administration Console, folder redirection settings are not properly applied per settings on WEM Agent machine. FOR EXAMPLE: All of the following folders, should be redirected and have been configured this way via the WEM...

CVE-2017-5701

Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary code via unauthorized firmware modification during BIOS Recovery...

CVE-2017-5722

Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage...

[SECURITY] Fedora 27 Update: pkgconf-1.3.9-1.fc27

pkgconf is a program which helps to configure compiler and linker flags for development frameworks. It is similar to pkg-config from freedesktop.org and handles .pc files in a similar manner as pkg-config...

Eaton ELCSoft Out-of-Bounds Write Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. An out-of-bounds write remote code execution vulnerability exists in Eaton ELCSoft Device Comment Range Parsing, which results in a lack of proper validation of user-supplied data, leadin...

[SECURITY] Fedora 26 Update: pkgconf-1.3.9-1.fc26

pkgconf is a program which helps to configure compiler and linker flags for development frameworks. It is similar to pkg-config from freedesktop.org and handles .pc files in a similar manner as pkg-config...

Buffer Overflow Vulnerability in Youku PC Player

Youku PC Player is a video player for Youku.com. YoukuNplayer.exe is vulnerable to a buffer overflow vulnerability when parsing special vod files. An attacker exploiting this vulnerability could cause a denial of service or execute arbitrary code...