8751 matches found
PT-2018-8915
Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.0 through 5.4.1 Description A stored cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML in the 'E-mail Details Screen' via unspecified vectors. Recommendations For Cybozu...
Anthem SmartArmor Anti-Ransom Freeware Protectdrv.sys Driver Has Denial of Service Vulnerability
Antenna Smart Armor Anti-Ransom Free Special Edition is an anti-ransom software for Antenna Smart Armor Terminal Defense System. There is a denial-of-service vulnerability in the protectdrv.sys driver of AnTen SmartAntiRansom Free Edition. An attacker can exploit the vulnerability to cause a...
Delay with touch screen swipe in HDX session from touch screen device when using Receiver for Windows
When using a touch screen device such as Microsoft surface pro which utilizes the full receiver for windows client users notice a delay when using the touch screen swipe feature in the session. This delay is most obvious when using the finger or a stylus pen to draw in an application such as MS...
Denial of Service Vulnerability in Antenna ATool Tools IRPFile.sys Driver
ATool is a professional system security inspection toolset designed for advanced user groups, which can analyze, diagnose and dispose of all kinds of common host problems and harmful files, as well as checking and repairing the system's sharing, account, patch and other information. A denial of...
Memory Corruption Vulnerability in AutoEnt
AutoEnt is a screen configuration software. A memory corruption vulnerability exists in AutoEnt. An attacker can exploit the vulnerability to cause memory corruption when reading a project file...
Denial of Service Vulnerability in Micropoint Active Defense Personal Edition
Micropoint Active Defense System Personal Edition is a new-generation anti-virus product with completely independent intellectual property rights developed by Micropoint Baihui Beijing Information Security Technology Company Limited hereinafter referred to as Micropoint. A denial-of-service...
HDX Media Engine Crashes when Disconnecting or Logging off From a Session
The HDX media engine crashes when disconnecting or logging off from a session. Here is how to reproduce the issue: 1. Start a published desktop from a ThinClient dual screen. 2. Within the published Desktop, launch another desktop. 3. Put this desktop on the second screen. 4. Logoff or disconnect...
My Little FormBook
This blog post is authored by Warren Mercer and Paul Rascagneres. Summary Cisco Talos has been tracking a new campaign involving the FormBook malware since May 2018 that utilizes four different malicious documents in a single phishing email. FormBook is an inexpensive stealer available as "malwar...
Denial of Service Vulnerability in Micropoint Active Defense Personal Edition
Micropoint Active Defense System Personal Edition is a new-generation anti-virus product with completely independent intellectual property rights developed by Micropoint Baihui Beijing Information Security Technology Company Limited hereinafter referred to as Micropoint. A denial-of-service...
Pseudo-Shell Post-Exploitation Module
This module will run a Pseudo-Shell. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'readline' class MetasploitModule Msf::Post include Msf::Post::File include Msf::Post::Unix include Msf::Post::Linux::System...
Security Bulletin: Vulnerability found in IBM Sterling B2B Integrator (CVE-2014-6099)
Summary IBM Sterling B2B Integrator is affected by a security vulnerability in the Change Password screens which could result in a brute force attack. Vulnerability Details CVEID:CVE-2014-6099 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition allows for an attacker to attempt login reques...
About the security content of iOS 11.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Microsoft Windows: MSS: Time (seconds) before the screen saver grace period expires
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlscreensavergraceperiod.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: ScreenSaverGracePeriod The time in seconds before the screen saver grace period expires 0 recommended Authors: Emanuel Moss Copyright:...
Microsoft Windows: Prevent enabling lock screen camera
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincplockscreencamera.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent enabling lock screen camera Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...
Microsoft Windows: Prevent enabling lock screen slide show
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincplocklockscreenslideshow.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent enabling lock screen slide show Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...
June 12, 2018âKB4284835 (OS Build 17134.112)
None None...
PT-2018-17109
Name of the Vulnerable Software and Affected Versions: SoftControl/SafenSoft SysWatch versions prior to 4.4.1 SoftControl/SafenSoft TPSecure versions prior to 4.4.1 SoftControl/SafenSoft Enterprise Suite versions prior to 4.4.1 Description: The issue is related to improper restriction of write...
Code Execution Vulnerabilities in Multiple Crestron Products
Crestron TSW-1060 and others are touch screen devices from Crestron Electronics, USA. A security vulnerability exists in multiple Crestron products. A remote attacker can exploit the vulnerability to execute code via an injection command...
CVE-2016-9065
The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake location bar without any user notification. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This...
Denial of Service Vulnerability in Filmfd.sys Processing Malformed Data in Fair Intelligence Antivirus Software
Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. filmfd.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A security vulnerability exists in the filmfd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 V8.1.7.6865. An attacker can exploit this...