PT-2018-1416

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.16 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with logon to the infrastructure to compromise...

PT-2018-1400

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.16 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with logon to the infrastructure to compromise...

PT-2018-1398

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.16 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with logon to the infrastructure to compromise...

PT-2018-1403

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.16 Description The issue is related to insufficient access control in the Oracle VM VirtualBox component, specifically in the Core subcomponent. This allows an unauthenticated attacker with logon to t...

PT-2018-1402

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.16 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with logon to the infrastructure where Oracle VM...

MGASA-2018-0257 Updated virtualbox packages fix security vulnerabilities

This update provides virtualbox 5.2.12 and fixes the following security issues: Unauthorized remote attacker may have caused a hang or frequently repeatable crash complete DOS CVE-2018-0739. Attacker with host login may have compromised Virtualbox or further system services after interaction with...

Updated virtualbox packages fix security vulnerabilities

This update provides virtualbox 5.2.12 and fixes the following security issues: Unauthorized remote attacker may have caused a hang or frequently repeatable crash complete DOS CVE-2018-0739. Attacker with host login may have compromised Virtualbox or further system services after interaction with...

Windows Packer Project for Defenders: DARKSURGEON

Darksurgeon is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense. Darksurgeon has three stated goals: Accelerate incident response, digital forensics, malware analysis, and network defense with a preconfigured Windows 10 environment...

GLSA-201805-08 : VirtualBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-08 VirtualBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details. Impact : An attacker could take control of VirtualBox...

VirtualBox: Multiple vulnerabilities

Background VirtualBox is a powerful virtualization product from Oracle. Description Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details. Impact An attacker could take control of VirtualBox resulting in the execution of...

Oracle VM VirtualBox 5.1.x < 5.1.36 / 5.2.x < 5.2.10 (April 2018 CPU)

The version of Oracle VM VirtualBox running on the remote host is 5.1.x prior to 5.1.36 or 5.2.x prior to 5.2.10. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additiona...

UPDATE: Kali Linux 2018.2 Release!

PenTestIT RSS Feed Second Kali Linux update of this year and this time, it is about the latest Kali Linux 2018.2 release! The last release was made available recently in the month of February. This new release includes all patches, fixes, updates, and improvements since the last release – Kali...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2018:1057-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for virtualbox (important)

This update for VirtualBox to version 5.1.36 fixes multiple issues: Security issues fixed: - CVE-2018-0739: Unauthorized remote attacker may have caused a hang or frequently repeatable crash complete DOS - CVE-2018-2830: Attacker with host login may have compromised Virtualbox or further system...

openSUSE Security Update : virtualbox (openSUSE-2018-389) (Optionsbleed)

This update for VirtualBox to version 5.1.36 fixes multiple issues : Security issues fixed : - CVE-2018-0739: Unauthorized remote attacker may have caused a hang or frequently repeatable crash complete DOS - CVE-2018-2830: Attacker with host login may have compromised Virtualbox or further system...

CVE-2018-2845

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2844

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2860

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

CVE-2018-2843

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2844

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...