10805 matches found
Exploit for Link Following in Microsoft
Security Research for FUN All focused on Microsoft Windows OS...
Intel Active Management Technology Denial of Service Vulnerability
Intel Active Management Technology AMT is an embedded system from the U.S. company Intel Intel that is integrated into the Intel chip and uses active management technology. A security vulnerability exists in Intel AMT that originates from the program not performing sufficient input validation. An...
rdesktop out-of-bounds read vulnerability (CNVD-2019-07808)
rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability in the processdemandactive function in rdesktop 1.8.3 and earlier versions can be exploited by an attacker to cause a denial of service...
Intel Converged Security and Management Engine Intel AMT Arbitrary Code Execution Vulnerability
The Intel Converged Security and Management Engine CSME is a security management engine from Intel Corporation, USA.Intel AMT is one of the active management technology modules. A security vulnerability exists in Intel AMT in Intel CSME, which arises from the program failing to perform sufficient...
CVE-2019-6716
The CVE-2019-6716 issue affects LogonBox Limited/Nervepoint Access Manager (versions 1.2–1.4-RG3; 2013–2017) where an unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core enables an attacker to enumerate internal Active Directory usernames and group names and to alter back-end j...
CVE-2019-6716
An unauthenticated Insecure Direct Object Reference IDOR in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs backup and synchronization jobs, which could...
Lenovo Patches Intel Firmware Flaws in Multiple Product Lines
Lenovo has patched several several high-severity vulnerabilities tied to Intel flaws that could enable escalation of privilege, information disclosure, or even denial of service. Overall the device maker patched flaws tied to 16 high-severity CVEs on Thursday. Those include five related to Intel...
DEBIAN-CVE-2018-20178
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function processdemandactive that results in a Denial of Service segfault...
UBUNTU-CVE-2018-20178
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function processdemandactive that results in a Denial of Service segfault...
CVE-2018-12196
Insufficient input validation in IntelR AMT in IntelR CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access...
CVE-2018-12187
Insufficient input validation in IntelR Active Management Technology IntelR AMT before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access...
CVE-2018-12185
Insufficient input validation in IntelR AMT in IntelR CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access...
CVE-2018-12187
CVE-2018-12187 : Indicated as insufficient input validation in Intel® AMT (part of Intel CSME/Server Platform Services/TXE) before 11.8.60, 11.11.60, 11.22.60 or 12.0.20, potentially allowing an unauthenticated user to cause a denial of service via network access. Connected documents corroborate ...
Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US
No description provided...
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An elevation of privilege vulnerability exists in Active Directory Forest trusts because of a default setting that lets an attacker in the trusting forest...
Microsoft Patches Two Win32k Bugs Under Active Attack
Microsoft released patches for two Win32k bugs actively under attack, along with fixes for four additional bugs that are publicly known, as part of its March Patch Tuesday security bulletin. The Win32k bugs are both elevation of privilege vulnerabilities, rated important, and tied to the way...
Active Directory Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest. To exploit this vulnerability, an attacker would first need to compromise an...
HPSBHF03607 rev. 3 - Intel CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates
Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with Intel® CSME, Server Platform Services, Trusted...
Microsoft Windows Active Directory CVE-2019-0683 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for...
KB4489885: Windows 7 and Windows Server 2008 R2 March 2019 Security Update
The remote Windows host is missing security update 4489885 or cumulative update 4489878. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting fores...