CVE-2017-0199: in-depth analysis of the Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

Recently, researchers also found a number of CVE-2017-0199 vulnerability of the sample. Although the Microsoft in this year 4 month has been released for the vulnerability the patch, but since its use is relatively simple, worldwide usage is still very high, here to share some of the phishing...

UBUNTU-CVE-2017-9468

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash...

WordPress < 4.7.5 Multiple Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.7.5. It is, therefore, affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file...

Beware! Hackers Can Steal Your Windows Password Remotely Using Chrome

A security researcher has discovered a serious vulnerability in the default configuration of the latest version of Google's Chrome running on any version of Microsoft's Windows operating system, including Windows 10, that could allow remote hackers to steal user's login credentials. Researcher...

Information disclosure

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

CVE-2017-7488

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

CVE-2017-7488

CVE-2017-7488 affects Authconfig 6.2.8, where using SSSD to authenticate against a remote server can leak information about existing usernames. The issue is described across multiple advisories (Red Hat/CentOS Amazon Linux, MiracleLinux, EulerOS, NewStart CGSL) as an information exposure in the S...

PT-2017-17765 · Red Hat +1 · Authconfig +2

Name of the Vulnerable Software and Affected Versions: Authconfig version 6.2.8 Description: The issue concerns an information exposure when using SSSD to authenticate against a remote server, resulting in the leak of information about existing usernames. Recommendations: For Authconfig version...

Veeam Explorer for SQL (VESQL): Unable to pass current account's context to the mount server

Challenge When attempting to restore a database using Veeam Explorer for Microsoft SQL Server with the "Use current account" option, the following error occurs: Access is denied: unable to pass current account's context to the mount server, please supply credentials and try again. Cause Veeam...

Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks

Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...

Office discovered zero vulnerabilities hackers can use the Word document to install malicious software-vulnerability warning-the black bar safety net

According to foreign media reports, recently a period of time, you when opening a Word document may have to be careful because the security company MCAfee researchers in Microsoft Office software found in a zero vulnerabilities, hackers can use it quietly in your computer system to install...

CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler

FireEye recently detected malicious Microsoft Office RTF documents that leverage CVE-2017-0199, a previously undisclosed vulnerability. This vulnerability allows a malicious actor to download and execute a Visual Basic script containing PowerShell commands when a user opens a document containing ...

GLSA-201704-01 : QEMU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201704-01 QEMU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : Remote server can cause a crash in the client causing executi...

The Word exposed 0day vulnerabilities: no need to enable the macros, open the document it automatically install a malicious program-vulnerability warning-the black bar safety net

! In fact, the use of Word macros as the distribution of malicious programs is the way today's conventional via, so many people choose to disable macros, but if you say disable the macros are useless, such a malicious Word document danger is quite different. Recently, McAfee and FireEye security...

Moxa MXview 2.8 - Denial of Service

Moxa MXview 2.8 - Denial of Service + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ============ www.moxa.com Product: =========== MXView v2.8 Download:...

Acknowledgement of Attacks Leveraging Microsoft Zero-Day

FireEye recently detected malicious Microsoft Office RTF documents that leverage a previously undisclosed vulnerability. This vulnerability allows a malicious actor to execute a Visual Basic script when the user opens a document containing an embedded exploit. FireEye has observed several Office...

Can't create the PVS connector - error returned at Test Credentials - "Failed to validate the Domain User and Password."

Configuration settings appeared correct but reviewing the unidesk-pvs-connector.log.json displayed the below: HandlerHelper: 'Application Error while processing 'Command' 'CreatePowerShellSessionCommand'': 'DefaultTitle="", MessageID="PowerShellCreateSession",...

CVE-2017-2640

An out-of-bounds write flaw was found in the way Pidgin processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process...

impress-remote-discover NSE Script

Tests for the presence of the LibreOffice Impress Remote server. Checks if a PIN is valid if provided and will bruteforce the PIN if requested. When a remote first contacts Impress and sends a client name and PIN, the user must open the "Slide Show - Impress Remote" menu and enter the matching PI...

eClinicalWorks healow@work SQL Injection Vulnerability

eClinicalWorks healow@work is a product for healthcare applications from eClinicalWorks, Inc. that provides a set of platforms for physicians to share health records. An SQL injection vulnerability exists in the EmployeePortalServlet page in eClinicalWorks healow@work version 8.0 build 8. An...