task_t considered harmful

Posted by Ian Beer, Project Zero This post discusses a design issue at the core of the XNU kernel which powers iOS and MacOS. Apple have shipped two iterations of mitigations followed yesterday by a large refactor in MacOS 10.12.1/iOS 10.1. We’ll look at the bugs, how they can be exploited to...

How to Troubleshoot Virtual Delivery Agent (VDA) Registration Issues

Cloud Admins: Run the Cloud Health Check InstructionsandInstallationSelect Cloud Health Check from the dropdown OnPrem Admins: Run the Citrix Scout Health Introduction to Citrix Scout After running the CHC or Scout depending on your environment begin troubleshooting common root causes: 1. Check V...

Google to Launch 'Andromeda OS' — An Android-Chrome OS Hybrid

Google's long-rumored Android-Chrome hybrid operating system is expected to debut at the company's upcoming hardware event on October 4. The company has been working to merge the two OSes for roughly 3 years with a release planned for 2017, but an "early version" to show things off to the world i...

Collabora CODE / Collabora Online / LibreOffice Online / OxOffice Online / Claro drive Detection (HTTP)

HTTP based detection of Collabora CODE Collabora Online Development Edition, Collabora Online, LibreOffice Online, OxOffice Online, Claro drive and similar other LibreOffice Online based products. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a reference...

Legal Robot: unsecured legalrobot.co.uk assets

A security researcher found that multiple gTLD permutations of our legalrobot domain names like legalrobot.co.uk were allowing access to sensitive ports 22 and disclosing vulnerable server versions. While these other domains are, for the time being, intended to simply redirect to our main...

CVE-2016-5673

UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number...

Open redirect

UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number...

CVE-2016-5673

CVE-2016-5673 affects UltraVNC Repeater prior to 1300, which does not restrict destination IP addresses or TCP ports. This allows a remote attacker to induce the repeater (acting as a proxy) to open connections to arbitrary hosts/ports, e.g., exploiting a :: substring between IP and port. The vul...

CVE-2016-5673

UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number...

Design Vulnerabilities in Range Networks OpenBTS/OpenBTS-UMTS

Range Networks OpenBTS/OpenBTS-UMTS is software for analog protocol stacks for GSM networks. A design vulnerability exists in Range Networks OpenBTS/OpenBTS-UMTS. Because the device is exposed to external connections, an attacker could exploit this vulnerability to compromise the BTS transceiver...

Design Vulnerability in OsmoCOM Osmo-TRX/Osmo-BTS

Osmocom is a series of projects on open source mobile communications, including software tools for GSM, DECT, TETRA and other mobile communication standards. A design vulnerability exists in OsmoCOM Osmo-TRX/Osmo-BTS. Due to the exposure of the device to external connections, an attacker could...

Legba Incorporated YateBTS Has a Design Vulnerability

Legba Incorporated YateBTS is software for analog protocol stacks for GSM networks. A design vulnerability exists in Legba Incorporated YateBTS. Since the device is exposed to external connections, an attacker could exploit this vulnerability to compromise the BTS transceiver over the Internet. B...

Embedded Hardware Hacking 101 – The Belkin WeMo Link

Why Embedded Hacking? Devices that are connected to the Internet or run a full operating system are becoming more and more prevalent in today’s society. From devices for locomotives to wireless light switches, the Internet of Things IoT trend is on the rise and here to stay. This has the potentia...

FreeBSD : End of Life Ports (7fe7df75-6568-11e6-a590-14dae9d210b8)

These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take caution and find alternative software as soon as possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Actiontec T2200H Remote Reverse Root Shell

Device Details Vendor: Actiontec Telus Branded, but may work on others Model: T2200H but likely affecting other similar models of theirs Affected Firmware: T2200H-31.128L.03 Device Manual: http://static.telus.com/common/cms/files/internet/telust2200husermanual.pdf Reported: November 2015 Status:...

Lenovo PowerV Firewall cli Command Execution Vulnerability

Lenovo PowerV Firewall is a firewall product independently developed by NetGuard. A remote command execution vulnerability exists in the Lenovo Power V Firewall due to a default password. Lenovo Power V series management services run on ports 22 and 23 by default, and provide management interface...

Shopify: Unauthorized access to Zookeeper on http://locutus-zk3.ec2.shopify.com:2181

What is Zookeeper? ==================== Zookeeper is a coordination service for distributed applications. It allows common services such as naming, synchronisation, configuration management and group services to be managed by a simple interface and It uses a data model of File System on an...

Siemens SIMATIC NET PCSoftware Denial of Service Vulnerability

SIMATIC NET is an open and multifaceted communication system provided by Siemens at the industrial control level. A denial of service vulnerability exists in Siemens SIMATIC NET PCSoftware. An attacker can exploit the vulnerability by sending specially crafted packets to ports...

CVE-2016-5137

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs,...

FreeBSD : Multiple ports -- Proxy HTTP header vulnerability (httpoxy) (cf0b5668-4d1b-11e6-b2ec-b499baebfeaf)

httpoxy.org reports : httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments. It comes down to a simple namespace conflict:. - RFC 3875 CGI puts the HTTP Proxy header from a request into the environment variables as HTTPPROXY - HTTPPROXY is a...