PT-2017-12389

Name of the Vulnerable Software and Affected Versions xorg-x11-server versions prior to 1.19.5 Description The issue is related to missing length validation in the MIT-SCREEN-SAVER extension, which allows a malicious X client to cause the X server to crash or possibly execute arbitrary code...

CVE-2017-12860

The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded...

Hardcoded credentials

The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded...

Apple Allows Uber to Use a Powerful Feature that Lets it Record iPhone Screen

If you are an iPhone user and use Uber app, you would be surprised to know that widely popular ride-hailing app can record your screen secretly. Security researcher Will Strafach recently revealed that Apple selectively grants what's known as an "entitlement" Uber a powerful ability to use the...

Stable Channel Updates for Chrome OS

The Stable channel has been updated to 61.0.3163.113 Platform version: 9765.76.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...

Mozilla Firefox for Android Page Fake Vulnerability

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 56 for Android. A remote attacker can exploit the vulnerability to fake a loaded and used page when...

Apple macOS High Sierra Screen Lock Information Disclosure Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Screen Lock is one of the lock screen components. A security vulnerability exists in the Screen Lock component of Apple macOS High Sierra versions prior to 10.13. An attacker in close physical proximity...

App Layering/Unidesk: Boot failure after windows updates cmimcext.sys

Windows updates causes server to fail boot with error message file missing cmimcext.sys. BSOD with0xc000000f stop code. This can apply to a newly imported OS layer or to a new version of an existing OS layer...

Secure App's access on Android devices Hung with the Screen "please wait"

End user accesses Secure App's on Android device which flips to SecureHub forauthentication and will get stuck on the screen 'Please wait' and circle keep on spinning endlessly. Screenshot Below for reference:...

Fedora 26 : 1:gdm (2017-e7ae1ed967)

Update to 3.24.3 to address CVE-2017-12164 lock screen bypass when using autologin Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible withou...

[SECURITY] Fedora 26 Update: gdm-3.24.3-1.fc26

GDM provides the graphical login screen, shown shortly after boot up, log out, and when user-switching...

Logical Design Vulnerability in Antenna SmartArmor protectdrv.sys Driver

Antenna Intelligent Armor Terminal Defense System, or Antenna Private Cloud Security System hereinafter referred to as "Intelligent Armor", is an endpoint threat security protection product developed specifically for business networks of enterprises, governments, and organizations. A logical desi...

Block Screen capture option in MDX policies for IOS devices

Question : Block Screen capture option is not available in SecureMail MDX policies for IOS devices. Answer :​ Block screen capture option is available only on Android and not on iOS. Any option which is not available under MDX policies is by default On. Hence the Screen capture/snapshots will be...

Per app VPN for android - Cannot connect to internal resources.

After setting up per app VPN for android, the customer is unable to connect to internal resources. Google chrome launches but page comes up in a blank white screen .. VPN connections shows as not sending or receiving packets...

CVE-2017-12164

A flaw was discovered in the gdm where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enable for a victim, an attacker could simply select 'login as another user' to unlock their screen...

EulerOS 2.0 SP2 : gdm (EulerOS-SA-2017-1174)

According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key...

Petya expands its scope: A global ransomware threat

Ransomware remains a formidable threat for individual users and businesses alike, particularly as new sample families continue to be discovered by security researchers. What makes ransomware so dangerous is the fact that victims are denied access to their most important files and data - a problem...

CVE-2016-0356

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895...

Cross site request forgery (csrf)

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895...

CVE-2016-0356

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895...