CVE-2018-16160

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

CVE-2018-16160

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

Authentication flaw

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

CVE-2018-16160

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

CVE-2018-16160

CVE-2018-16160 affects SecureCore Standard Edition Version 2.x. An authentication bypass allows an attacker to log in to a Windows PC via a flaw in the product’s authentication mechanism (CWE-287). Affected product: SecureCore Standard Edition 2.x running on Windows (Windows 8/8.1 noted in JVN). ...

JVN#21528670: SecureCore Standard Edition vulnerable to authentication bypass

SecureCore Standard Edition provided by Feitian Japan Co., Ltd. contains an authentication bypass vulnerability CWE-287. Impact An attacker may bypass the product's authentication and log in to a Windows PC. Solution Update the Software Update the software to the latest version according to the...

Fauxpersky Keylogger Malware Stealing Passwords from Windows PCs

By Waqas Cybercriminals are quite innovative, to be honest; they are always This is a post from HackRead.com Read the original post: Fauxpersky Keylogger Malware Stealing Passwords from Windows PCs...

Cortana Lets Hackers Infect Windows PC Even when it is Locked

By Waqas The voice commands enabled, multi-language Cortana virtual assistant is probably This is a post from HackRead.com Read the original post: Cortana Lets Hackers Infect Windows PC Even when it is Locked...

Two Nasty Outlook Bugs Fixed in Microsoft’s Feb. Patch Tuesday Update

Microsoft issued 50 security fixes as part of its February Patch Tuesday release, covering vulnerabilities in Windows, Office, Internet Explorer, Edge and its JavaScript engine ChakraCore. Fourteen of the vulnerabilities are labeled as critical, 34 as important and two as moderate. Two notable...

Fortinet Installer Client 5.6 DLL Hijacking

Affected Product: Fortinet Installer Client 5.6 for Windows PC Credit: Souhardya Sardar and Rohit Bankoti Contact : github.com/Souhardya Summary: Fortinet Installer contains a privilege escalation vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the...

Amazon Audible DLL Hijacking

Aloha, Introduction: Vendor: Amazon Affected Product: Audible Software for Windows PC Fixed in: Latest Version released by the vendor Vendor Website: https://www.audible.com/ Vulnerability Type: Privilege Escalation CVE: CVE-2017-17069 Credit: Himanshu Mehta @LionHeartRoxx Summary: Audible contai...

IBM i Access 7.1 - Local Buffer Overflow Code Execution

IBM i Access 7.1 - Local Buffer Overflow Code Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/IBMI-CLIENT-ACCESS-BUFFER-OVERFLOW.txt Vendor: ============== www.ibm.com Product:...

Microsoft warning: Windows PC there are also Freak security vulnerability-vulnerability warning-the black bar safety net

Microsoft on Friday warned that hundreds of millions of Windows PC users are facing a“Freak”security vulnerability threats, and that a newly discovered security vulnerability was initially considered only for mobile devices and Apple Mac computers pose a threat. On Tuesday, by 9 The name of...

Detekt — Free Anti-Malware Tool To Detect Govt. Surveillance Malware

Human rights experts and Privacy International have launched a free tool allowing users to scan their computers for surveillance spyware, typically used by governments and other organizations to spy on human rights activists and journalists around the world. This free-of-charge anti-surveillance...

JVN#63940326: Sophos Disk Encryption vulnerable to authentication bypass

Sophos Disk Encryption is a product to encrypt hard disk data on Windows PC. By default, Window requires logon authentication when the PC wakes up from hibernation or sleep mode. When Sophos Disk Encryption is installed, no authentication is required before operating the PC. Impact An...

Flashback malware Creater earning $10,000 per day from Google Ads

Flashback malware Creater earning $10,000 per day from Google Ads In a recent analysis of the business model behind the Flashback Trojan, Symantec security researchers reported that the main objective of the malware is revenue generation through an ad-clicking component. Security researchers at...

Input validation

UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP...

Security Best Practice: Domains Block List Protection - Blocking LogMeIn

LogMeIn is a remote control application that provides access to any Windows PC from anywhere in the world. It only requires a computer connected to the Internet. The user can remotely access a target computer and have a full desktop view and complete control of everything on it, including: Remote...