Security update for wpa_supplicant (moderate)

This update for wpasupplicant provides the following fixes: This security issues was fixe: - CVE-2018-14526: Under certain conditions, the integrity of EAPOL-Key messages was not checked, leading to a decryption oracle. An attacker within range of the Access Point and client could have abused the...

CVE-2018-14665

creationtimestamp| type| source ---|---|--- 2018-10-25 19:18:00+00:00| published-proof-of-concept| https://t.me/antichat/2436 2018-10-25 19:19:27+00:00| seen| https://t.me/antichat/2437 2018-10-26 18:09:37+00:00| seen| https://t.me/VulnerabilityNews/2622 2018-10-26 18:21:42+00:00|...

CVE-2018-15442

creationtimestamp| type| source ---|---|--- 2018-10-24 21:28:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/webexec.rb 2018-10-24 21:28:47+00:00| seen|...

CVE-2018-15379

creationtimestamp| type| source ---|---|--- 2018-10-12 15:45:58+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4563 2018-11-10 17:07:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ciscoprimeinfrce.rb 2025-02-06 03:13:43+00:00|...

CVE-2018-17456

creationtimestamp| type| source ---|---|--- 2018-10-08 01:16:33+00:00| seen| https://t.me/canyoupwnme/4519 2018-10-09 01:10:14+00:00| seen| https://t.me/VulnerabilityNews/2163 2018-10-17 23:04:20+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4585 2018-11-14 18:58:40+00:00| seen|...

CVE-2017-11176

creationtimestamp| type| source ---|---|--- 2018-10-02 17:05:19+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4487 2018-10-31 09:28:40+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/21674 2019-12-31 22:20:59+00:00| published-proof-of-concept|...

CVE-2018-14634

creationtimestamp| type| source ---|---|--- 2018-09-26 09:37:30+00:00| seen| https://t.me/SecLabNews/3238 2018-09-26 14:23:41+00:00| published-proof-of-concept| https://t.me/thehackernews/83 2018-09-27 18:06:51+00:00| seen| MISP/5bad1b74-55c0-45e5-9b7a-3fe60a021402 2018-10-01 16:51:22+00:00| seen...

CVE-2017-3506

creationtimestamp| type| source ---|---|--- 2018-09-19 17:29:15+00:00| seen| MISP/5ba281fe-cc88-4bf3-a9ef-3c290a021402 2019-06-20 12:20:36+00:00| seen| https://t.me/Pen7esting/216 2020-10-09 16:07:00+00:00| seen| MISP/fab9047e-3eb6-4d8e-a967-65c02cd3e253 2023-05-18 12:43:27+00:00| exploited|...

CVE-2018-17176

A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication always transmitted in cleartext can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all...

CVE-2018-17176

A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication always transmitted in cleartext can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all...

CVE-2006-4842

creationtimestamp| type| source ---|---|--- 2018-09-17 22:21:29+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/libnsprnsprlogfileprivesc.rb 2018-09-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45433 2025-02-06...

CVE-2018-8440

creationtimestamp| type| source ---|---|--- 2018-09-11 23:24:48+00:00| exploited| https://t.me/informationsecuritychannel/20194 2018-09-11 23:30:55+00:00| exploited| https://t.me/cibsecurity/156 2018-09-12 03:14:09+00:00| published-proof-of-concept| https://t.me/ctinow/2319 2018-09-12...

CVE-2018-12376

creationtimestamp| type| source ---|---|--- 2018-09-06 18:26:46+00:00| seen| https://t.me/informationsecuritychannel/20047 2018-10-05 13:27:46+00:00| seen| https://t.me/informationsecuritychannel/20938...

CVE-2018-14847

creationtimestamp| type| source ---|---|--- 2018-09-04 08:51:50+00:00| seen| MISP/5b8e46ef-a8b4-4059-8c5c-4cc0950d210f 2018-09-04 16:19:46+00:00| exploited| https://t.me/SecLabNews/3063 2018-09-05 10:41:49+00:00| exploited| https://t.me/mtikpro/98 2018-09-05 16:12:57+00:00| exploited|...

CVE-2018-9489

creationtimestamp| type| source ---|---|--- 2018-08-30 17:20:18+00:00| seen| https://t.me/canyoupwnme/4301 2018-11-12 18:41:05+00:00| seen| MISP/5be9c820-b558-4494-a96e-4a4d0a021402 2018-11-12 18:45:50+00:00| seen| MISP/5be9ca0e-c440-4436-9b1a-4a4d0a021402...

CVE-2018-11510

creationtimestamp| type| source ---|---|--- 2018-08-17 15:14:14+00:00| exploited| https://t.me/VulnerabilityNews/807 2019-12-17 14:15:18+00:00| seen| MISP/5df8e293-8fe4-4dc0-a0c4-4c3502de0b81 2020-10-09 14:49:39+00:00| seen| MISP/08d290fb-f97b-4471-b4fb-65cd5672f476...

CVE-2018-6177

creationtimestamp| type| source ---|---|--- 2018-08-16 10:09:55+00:00| seen| https://t.me/SecLabNews/2916 2018-08-20 18:35:13+00:00| seen| https://t.me/xakepru/4412 2023-11-06 20:37:02+00:00| published-proof-of-concept| https://t.me/thehackernews/49...

CVE-2018-8414

creationtimestamp| type| source ---|---|--- 2018-08-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=316 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 16:50:11+00:00| seen| https://t.me/arpsyndicate/981 2024-12-24 20:29:12+00:00|...

Remote Desktop Caching - Tool To Recover Old RDP (mstsc) Session Information In The Form Of Broken PNG Files

This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an...

CVE-2018-12464

creationtimestamp| type| source ---|---|--- 2018-07-31 02:16:41+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/microfocussecuremessaginggateway.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...