529 matches found
CVE-2016-8939
IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...
Design/Logic Flaw
IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...
CVE-2016-8939
IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...
CVE-2016-8939
CVE-2016-8939 affects IBM Spectrum Protect (formerly Tivoli Storage Manager) Windows clients, where passwords are stored in the Windows Registry under HKLM\Software\IBM\ADSM\CurrentVersion\Nodes. The vulnerability enables a local attacker with sufficient privileges to disclose credentials stored ...
CVE-2016-8939
IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...
WMImplant – A WMI Based Agentless Post-Exploitation RAT Developed in PowerShell
Just over one year ago November 2015, I released WMIOps, a PowerShell script that enables a user to carry out different actions via Windows Management Instrumentation WMI on the local machine or a remote machine. WMIOps can: Start or stop a process. Return a list of all running processes. Power...
How to remove "Ghost" NIC devices from Windows
Unidesk 2.X releases before 2.8.3:After Desktops have been backed up and restored to a new CachePoint, the NIC doesn't come up. Even after restarting to apply changes and rediscovering the disks, the driver does not appear to install correctly. This can also happen during layer changes on a...
Using the Registry to Discover Unix Systems and Jump Boxes
On red team engagements, Mandiant consultants are often tasked with identifying and obtaining access to critical Unix systems within our client’s environments. The objectives may include obtaining payment card data on point of sale terminals or accessing intellectual property residing on Apple...
Using the Registry to Discover Unix Systems and Jump Boxes
On red team engagements, Mandiant consultants are often tasked with identifying and obtaining access to critical Unix systems within our client’s environments. The objectives may include obtaining payment card data on point of sale terminals or accessing intellectual property residing on Apple...
Cimetrics BACstac 6.2f - Local Privilege Escalation
Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation Vendor: Cimetrics, Inc. Product web page: https://www.cimetrics.com Affected version: 6.2f Summary: BACstac belongs to product BACstacTM Networking Software and was developed by company Cimetrics Inc. Cimetrics is excited to announ...
MS16-1 2 4: Microsoft kernel integer overflow vulnerability-vulnerability warning-the black bar safety net
Foreword Last month I found and reported a Windows registry integer overflow vulnerability, the last week two 2016.10.25）Microsoft released the bug fix patch MS16-1 2 4 and the vulnerability number CVE-2 0 1 6-0 0 7 0's. The vulnerability may lead to local privilege escalation that affects multip...
CVE-2016-3946
SAP Console aka SAPConsole 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461...
CVE-2016-3946
SAP Console aka SAPConsole 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461...
Code injection
SAP Console aka SAPConsole 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461...
CVE-2016-3946
SAP Console aka SAPConsole 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461...
CVE-2016-3946
SAP Console (aka SAPConsole) 7.30 is affected by an information disclosure vulnerability where local users can read the Windows registry to obtain SAP Server login credentials. Root cause: insecure handling/storage of credentials in the Windows registry as described in SAP Security Note 2121461. ...
MS16-124: Security Update for Windows Registry (3193227)
The remote Windows host is missing a security update. It is, therefore, affected by multiple information disclosure vulnerabilities in the kernel API that allow a local attacker, via a specially crafted application, to disclose sensitive registry information. C Tenable Network Security, Inc...
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1, and Windows Server 2012 R2: MS16-101 Security update for Windows authentication methods MS16-118 Cumulative security update for...