Microsoft Windows Firewall: Private: Logging: Log successful connections

This setting specifies logging when Windows Firewall with Advanced Security allows an inbound connection. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Windows Firewall: Public: Logging: Log successful connections

This setting specifies logging when Windows Firewall with Advanced Security allows an inbound connection. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Windows Firewall: Public: Logging: Log dropped packets

This setting specifies logging when Windows Firewall with Advanced Security discards an inbound packet for any reason. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows Firewall: Domain: Settings: Display a notification

This setting controls if Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Microsoft Windows Firewall: Private: Inbound connections

This setting determines the behavior for inbound connections that do not match an inbound firewall rule. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

KLA12551 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code. Below is a...

Threat Roundup for June 1-15

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 01 and June 15. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristic...

Optional Windows NTLM SSO authentication changes

Microsoft is releasing an optional security enhancement to NT LAN Manager NTLM, limiting which network resources various clients in the Windows 10 or the Windows Server 2016 operating systems can use NTLM Single Sign OnSSO as an authentication method. When you deploy the new security enhancement...

WannaCry coda: Have you disabled SMBv1?

By now, if you're reading this blog, you probably have read about WannaCry. If not, please take a moment to review: Wanna Decryptor WNCRY Ransomware Explained Using Threat Intelligence to Mitigate Wanna Decryptor WannaCry WannaCry Update: Vulnerable SMB Shares Are Widely Deployed And People Are...

Ghostscript 9.20 - Filename Command Execution

Ghostscript 9.20 - Filename Command Execution + + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/GHOSTSCRIPT-FILENAME-COMMAND-EXECUTION.txt + ISR: ApparitionSec + Vendor: =============== ghostscript.com Product:...

Windows Firewall Control Privilege Escalation

Exploit Title: Windows Firewall Control Unquoted Service Path Privilege Escalation Date: 24/09/2016 Exploit Author: [email protected] Vendor Homepage: http://www.binisoft.org Version: 4.8.6.0 Tested on: Windows 7 32/64bit ====Description==== Windows Firewall Control lacks of the quotes in...

Microsoft Windows Firewall Control - Unquoted Service Path Privilege Escalation

Exploit Title: Windows Firewall Control Unquoted Service Path Privilege Escalation Date: 24/09/2016 Exploit Author: [email protected] Vendor Homepage: http://www.binisoft.org Version: 4.8.6.0 Tested on: Windows 7 32/64bit ====Description==== Windows Firewall Control lacks of the quotes in...

drchrono: node.drchrono.com - Information Disclosure and Windows Host Exposed

This host has the following TCP ports open; 21 - FTP 22 - SSH 135 - Windows RPC Dynamic 445 - Microsoft DS 3389 - Remote Desktop 5986 - PowerShell Remoting 47001 - WinRM The server appears to be secured well on the whole. However the services SSH and FTP do all give out some information. Please s...

VMware vCenter Server Patch Reissue

VMware on Saturday reissued a patch from October that incompletely addressed a critically rated remote code execution vulnerability in vCenter Server. The original vulnerability, CVE-2015-2342, was a poorly configured JMX RMI service in vCenter Server that was remotely accessible. The flaw allowe...

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Für Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. OpenVAS Vulnerability Test $Id: GSHBM4238.nasl 7883...

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Für Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. Auf Linux, soweit möglich, anzeige der iptables...

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Für Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. Auf Linux, soweit möglich, anzeige der iptables...

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters. Stand: 14. Ergnzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Fr Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. SPDX-FileCopyrightText: 2015 Greenbone AG Some text...

IT-Grundschutz M4.098: Kommunikation durch Paketfilter auf Minimum beschränken

IT-Grundschutz M4.098: Kommunikation durch Paketfilter auf Minimum beschränken. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Für Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. SPDX-FileCopyrightText: 2015 Greenbon...

SmartSniff v2.16 - Capture TCP/IP packets on your network adapter

SmartSniff is a network monitoring utility that allows you to capture TCP/IP packets that pass through your network adapter, and view the captured data as sequence of conversations between clients and servers. You can view the TCP/IP conversations in Ascii mode for text-based protocols, like HTTP...