3575 matches found
Turns Out Microsoft Has Already Patched Exploits Leaked By Shadow Brokers
The latest dump of hacking tools allegedly belonged to the NSA is believed to be the most damaging release by the Shadow Brokers till the date. But after analyzing the disclosed exploits, Microsoft security team says most of the windows vulnerabilities exploited by these hacking tools, including...
Major Leak Suggests NSA Was Deep in Middle East Banking System
The Shadow Brokers hacker group is back with another trove of NSA documents including Windows exploits and evidence of financial spying in the Middle East. The post Major Leak Suggests NSA Was Deep in Middle East Banking System appeared first on WIRED...
Spammer's Arrest Puts End to Kelihos Botnet
The alleged Russian botmaster behind the Kelihos botnet was arrested while on vacation in Spain, putting an end to a seven-year cybercrime operation that foisted hundreds of millions of spam messages on consumers, as well as a dangerous array of banking malware and ransomware. Pyotr Levashov, als...
mapr Information Disclosure
Hello, The mapr web frontend component creates an information disclosure vulnerability. During the setup of mapr the configure.sh script calls a function ConfigureWSRole: function ConfigureWSRole if $clientOnly -eq 0 -a $dontChangeSecurityPermissionsOn -eq 0 ; then ConfigureRunUserForWS fi This...
CVE-2017-5671
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...
Code injection
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...
CVE-2017-5671
CVE-2017-5671 affects Honeywell Intermec PM23/PM42/PM43/PC23/PC43/PD43/PC42 printers (firmware before 10.11.013310 and 10.12.x before 10.12.013309). The vulnerability arises because /usr/bin/lua is installed setuid to the itadmin account, enabling local users to perform a BusyBox jailbreak and es...
MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya) (uncredentialed check)
The remote Windows host is affected by the following vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of certain requests. An unauthenticated, remote attacker can exploit these vulnerabilities, via a...
Microsoft Office Information Disclosure Vulnerability (CNVD-2017-03528)
Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office has an information disclosure vulnerability that can be exploited by an attacker to submit a special file that can be induced to be parsed by Shadow Tiger to obtain...
Still Getting Served: A Look at Recent Malvertising Campaigns Involving Exploit Kits
Malvertising occurs when an online advertising network knowingly or unknowingly serves up malicious advertisements on a website. Malvertisements are a type of “drive-by” threat that tend to result in users being infected with malware for simply visiting a website. The victims of this threat are...
MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya)
The remote Windows host is missing a security update. It is, therefore, affected by the following vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of certain requests. An unauthenticated, remote attacker...
Security fix for the ALT Linux 8 package shadow version 1:4.2.1-alt7.M80P.1
1:4.2.1-alt7.M80P.1 built March 13, 2017 Mikhail Efremov in task 179286 --- March 7, 2017 Mikhail Efremov - Backported from upstream git: + Fix a resource leak in syslogsg. + Fix a resource leak in libmis/idmapping.c. + Free memory on error path. - Fix user busy errors at userdel patch from Fedor...
Debian DLA-838-1 : shadow security update
Tobias Stoeckmann discovered that su does not properly handle clearing a child PID. A local attacker can take advantage of this flaw to send SIGKILL to other processes with root privileges, resulting in denial of service. For Debian 7 'Wheezy', these problems have been fixed in version...
Debian DSA-3793-1 : shadow - security update
Several vulnerabilities were discovered in the shadow suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-6252 An integer overflow vulnerability was discovered, potentially allowing a local user to escalate privileges via crafted input to the...
[SECURITY] [DLA 838-1] shadow security update
Package : shadow Version : 4.1.5.1-1+deb7u1 CVE ID : CVE-2017-2616 Debian Bug : 855943 Tobias Stoeckmann discovered that su does not properly handle clearing a child PID. A local attacker can take advantage of this flaw to send SIGKILL to other processes with root privileges, resulting in denial ...
DLA-838-1 shadow - security update
Bulletin has no description...
[SECURITY] [DSA 3793-1] shadow security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 24, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3793-1] shadow security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 24, 2017 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3793-1 (shadow - security update)
Several vulnerabilities were discovered in the shadow suite. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-6252 An integer overflow vulnerability was discovered, potentially allowing a local user to escalate privileges via crafted input to the...