August 30, 2018—KB4343893 (OS Build 16299.637)

None None...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...

Improvements and fixes - Windows 8.1 and Server 2012 R2

Improvements and fixes - Windows 8.1 and Server 2012 R2 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error 0xD1 when you run network monitorin...

Improvements and fixes for Windows Server 2008 Service Pack 2

Improvements and fixes for Windows Server 2008 Service Pack 2 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error 0xD1 when you run network...

July 16, 2018—KB4345420 (OS Build 16299.551)

None None...

Improvements and fixes - Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1

Improvements and fixes - Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error...

July 10, 2018—KB4338830 (Monthly Rollup)

None None...

July 16, 2018—KB4345419 (OS Build 15063.1209)

None None...

June 21, 2018—KB4284833 (OS Build 14393.2339)

None None...

Multi Manage the screensaver of the target computer

This module allows you to turn on or off the screensaver of the target computer and also lock the current session. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Manage the screensaver o...

Security Bulletin: Vulnerability in Apache Tomcat affects Rational Lifecycle Integration Adapter for HP ALM (CVE-2016-3092)

Summary Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component, and is supplied with specific versions of Rational Lifecycle Integration Adapter for HP ALM. By sending file upload requests, an attacker could exploit this vulnerability to...

Description of the security update for vulnerabilities in Windows Server 2008: June 12, 2018

Description of the security update for vulnerabilities in Windows Server 2008: June 12, 2018 Summary Multiple vulnerabilities exist within Windows Server 2008.To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures CVE. CVE-2018-1040 CVE-2018-8225...

Quest DR Series Disk Backup Software Command Injection Vulnerability

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Stop Replication" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Burpa - A Burp Suite Automation Tool

A Burp Suite Automation Tool With Slack Integration. Requirements burp-rest-api Burp Suite Professional slackclient Usage $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT...

A week in security (May 7 – May 13)

Last week on Labs, we looked at the case of a fake Android AV, an annoying adware that goes by the name of Kuik, the return of threat actors behind the Shopper Stop tech scam, a new Netflix phishing scam, the recent zero-day vulnerability in Internet Explorer, and the insufficiency of merely...

Tech support scam uses fake Shoppers Stop site to lure thousands

Update 2018-05-17: Shoppers Stop is a legitimate company based out of India and their brand was abused by scammers. These days, there are a lot of browser locker campaigns fueled by malvertising or redirection from hacked sites. But the Shoppers Stop tech scam campaign is actually a bit of both,...

Description of the security update for the vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018

Description of the security update for the vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018 Summary An elevation of privilege vulnerability and an information disclosure vulnerability exist in Windows when the Win32k component...

April 17, 2018—KB4093113 (Preview of Monthly Rollup)

None None...

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2018-07822)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...

Remote Control Vulnerability in MAC1100 PLCs

The MAC1100 PLC Programmable Logic Controller PLC is a product in the Dalian Computer Control DCCE Programmable Logic Controller PLC series. A remote control vulnerability exists in the MAC1100 PLC. An attacker can use the vulnerability to remotely and directly control the start and stop of the...