CVE-2018-15603: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

Microsoft Windows: Audit Other Logon/Logoff Events

Audit Other Logon/Logoff Events determines whether Windows generates audit events for other logon or logoff events. These other logon or logoff events include: - A Remote Desktop session connects or disconnects. - A workstation is locked or unlocked. - A screen saver is invoked or dismissed. - A...

Touch Screen Keyboard / On Screen Keyboard Minimizes On Every Key Pressed On it.

Touch screen keyboard / On-screen keyboard minimizes on every key pressed on it only on published application. It works fine for published Desktop...

OpenEMR SQL Injection Vulnerability (CNVD-2018-17195)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...

Email Phishers Using New Way to Bypass Microsoft Office 365 Protections

Phishing works no matter how hard a company tries to protect its customers or employees. Security researchers have been warning of a new phishing attack that cybercriminals and email scammers are using in the wild to bypass the Advanced Threat Protection ATP mechanism implemented by widely used...

Delta Electronics CNCSoft and ScreenEditor Stack Buffer Overflow Vulnerability

Delta Electronics CNCSoft and ScreenEditor are products of Delta Electronics, a CNC machine simulation system software and ScreenEditor, a HMI programming software. A stack buffer overflow vulnerability exists in Delta Electronics CNCSoft version 1.00.83 and earlier and ScreenEditor version...

Black Hat 2018: Cortana Flaw Allowed Takeover of Locked Windows 10 Device

LAS VEGAS – Researchers sounded the security alarm here at Black Hat over issues tied to voice control – specifically with the Windows Cortana service. On Wednesday they outlined a flaw patched in June by Microsoft dubbed “Open Sesame” that allowed an adversary to bypass a Windows 10 lock screen...

Multiple vulnerabilities in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE

Overview EC-CUBE Payment Module and GMO-PG Payment Module PG Multi-Payment Service, which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. Cross-site scripting vulnerability in the management screen CWE-79 - CVE-2018-0657 Inp...

Microsoft Windows: Do not display network selection UI

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkselectionui.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Do not display network selection UI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Microsoft Windows: Turn off app notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlockscreenappnotifications.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off app notifications on the lock screen Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

PT-2018-2939

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to weaknesses in the screen lock mechanism of the operating system. Exploitation of this issue may allow an attacker to bypass the lock screen and gain access to...

CVE-2018-7934

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

Denial of service

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

CVE-2018-7934

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

Hacking the Bitfi. Part 1

A large number of security researchers have taken exception to the ‘unhackable’ claims made by Bitfi and John McAfee about the security of their hardware cryptocurrency wallet. The $100K bounty offered appears to be something of sham, given it covers a very, very specific scenario. Bitfi states...

CVE-2018-7934: Improper Input Validation

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

PT-2018-18334

Name of the Vulnerable Software and Affected Versions: Huawei mobile phone versions prior to 8.0.0.145C432 Description: The issue is related to a denial of service DoS problem due to the device's inability to handle specific screen gestures. This could allow an attacker to trick users into...

DEBIAN-CVE-2017-12164

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...

CVE-2017-12164

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...

Denial of Service Vulnerability in Softmedia Rubik's Cube Software

Softmedia Tweak Cube tweakcube is a new generation of optimization master produced by Softmedia, the world's first system software certified by the official Microsoft Windows 7 logo, a number of top domestic awards, is now the first domestic user volume of Vista Optimizer and Windows 7 Optimizer ...