CVE-2018-7675

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...

Receiver for Windows 4.9LTSR/4.10 - Citrix HDX Engine Crash When Connecting to Linux VDA

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When connecting from a client machine that has Receiver 4.9 LTSR or Receiver 4.10 upgraded from...

Someone hacked this advertising screen to mine Bitcoin

By Waqas The sudden surge in the price of Bitcoin encouraged the This is a post from HackRead.com Read the original post: Someone hacked this advertising screen to mine Bitcoin...

[20180504] - Core - Installer leaks plain text password to local user

The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and displays the plain text password for the administrator account at the confirmation screen...

CVE-2018-6844

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

CVE-2018-6844: Improper Neutralization of Input During Web Page Generation

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

CVE-2018-6777

In Jiangmin Antivirus 16.0.0.100, the driver file KVFG.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220400...

CVE-2018-6781

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008264...

Sophos Tester Tool Denial of Service Vulnerability

Sophos Tester Tool is a penetration testing tool from Sophos UK. A security vulnerability exists in Sophos Tester Tool version 3.2.0.7 Beta, which stems from the program's failure to detect parameters of the DeviceIoControl code. An attacker can exploit the vulnerability to cause a blue screen or...

PT-2018-17741

Name of the Vulnerable Software and Affected Versions Jiangmin Antivirus version 16.0.0.100 Description The issue in Jiangmin Antivirus allows local users to cause a denial of service, potentially leading to a Blue Screen of Death BSOD, due to the driver file KSysCall.sys not validating input...

CVE-2018-6624

OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html...

PT-2018-17678

Name of the Vulnerable Software and Affected Versions WatchDog Anti-Malware version 2.74.186.150 Description The issue in WatchDog Anti-Malware allows local users to cause a denial of service, potentially leading to a Blue Screen of Death BSOD, because the driver file ZAMGUARD32.SYS does not...

Null pointer dereference

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

CVE-2018-6319

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

CVE-2018-6319

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

CVE-2018-6523

In nProtect AVS V4.0 before 4.0.0.39, the driver file TKFsAv.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c...

CVE-2018-6319: NULL Pointer Dereference

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

PT-2018-17610

Name of the Vulnerable Software and Affected Versions nProtect AVS V4.0 versions prior to 4.0.0.39 Description The issue allows local users to cause a denial of service, potentially resulting in a Blue Screen of Death BSOD, due to the driver file TKRgFtXp.SYS not validating input values from the...

nProtect AVS Denial of Service Vulnerability

nProtect AVS is security software for blocking malware, spyware, ransomware, and other cyber threats. A denial of service vulnerability exists in the driver file TKRgFtXp.SYS in nProtect AVS V4.0 4.0.0.38. The vulnerability arises due to an unvalidated input value from IOCtl 0x220408. A local use...

PT-2018-17474

Name of the Vulnerable Software and Affected Versions Sophos Tester Tool version 3.2.0.7 Beta Description The issue concerns a driver in Sophos Tester Tool that accepts a specific DeviceIoControl code without properly checking its argument, which is a memory address. If a NULL pointer or an inval...