The vulnerability of the implementation of Intel Active Management Technology for microprogramming software, Intel Converged Security and Manageability Engine, and Intel Management Engine, which allows a perpetrator to trigger a service failure.

The vulnerability of the Intel Active Management Technology AMT implementation of the Intel Converged Security and Manageability Engine CSME and Intel Management Engine ME arises due to errors in processing memory objects. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the implementation of Intel Active Management Technology (AMT) for microprogramming software such as Intel Converged Security and Manageability Engine and Intel Management Engine allows a perpetrator to execute arbitrary code with AMT privileges.

The vulnerability of the Intel AMT microprogramming software, the Intel Converged Security and Manageability Engine CSME, and the Intel Management Engine ME, arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a perpetrator to execute arbitrary...

Easy File Sharing WS v7.2 - (Domain Name) Buffer Overflow

Document Title: =============== Easy File Sharing WS v7.2 - Domain Name Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2154 Release Date: ============= 2018-10-04 Vulnerability Laboratory ID VL-ID: ====================================...

Ignite 2018 highlights: password-less sign-in, confidential computing, new threat protection, and more

What a week it was in Orlando! Ignite is always a biggie, and this one was no exception. For all of us here at Microsoft who get to work on security, spending time with customers to learn how you are using our security products today and to share new innovations to come is a highlight. At this...

Meet GhostDNS: The dangerous malware behind IoT botnet targeting banks

By Waqas Security researchers at NetLab, a sub-division of the Chinese cybersecurity firm Qihoo 360, have discovered a new, wide-scale, and very active malware campaign that has managed to hijack more than 100,000 home routers between Sept 21 and 27. A majority of routers almost 88% are located i...

Citrix ShareFile StorageZones Control Directory Traversal Vulnerability

Citrix ShareFile is a file sharing solution from Citrix Systems, Inc.StorageZones Controller is one of the private data storage controllers. A path traversal vulnerability exists in Citrix ShareFile StorageZones Controller versions prior to 5.4.2. A remote attacker can exploit this vulnerability ...

PT-2018-13900 · Tgstation · Tgstation-Server

Name of the Vulnerable Software and Affected Versions: tgstation-server versions 3.2.1.0 through 3.2.4.0 Description: The issue allows active logins to be cached, enabling subsequent logins to succeed with any username or password. This is due to a bug in the WCF communication layer, where the...

Get deeper into security at Microsoft Ignite 2018

This year at Microsoft Ignite, we will be making some exciting announcementsfrom new capabilities for identity management and information protection to powerful artificial intelligence AI innovations that can help you stay ahead of an often overwhelming surge in threats and security alerts. Join ...

Wallarm NG-WAF is Now a Part of Kong Hub to Provide Better Protection for Microservices, APIs and…

Wallarm NG-WAF is Now a Part of Kong Hub to Provide Better Protection for Microservices, APIs and Serverless Thousands of companies from startups to Fortune 500 enterprises use Kong as their API gateway. With a blazingly fast performance, it comes with a perfect feature set for everyone who manag...

Microsoft Windows Server ADFS Server-Side Request Forgery Vulnerability

Microsoft Active Directory Federation Services ADFS is an Active Directory Federation Service from Microsoft. The service provides Web Single Sign-On SSO technology, which enables authentication of a user to multiple websites or applications during a single session. A server-side request forgery...

Apache Active MQ 5.0.0 - 5.15.5 Missing TLS Hostname Verification Vulnerability - Linux

Apache Active MQ is missing its TLS hostname verification. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...

Apache Active MQ 5.0.0 - 5.15.5 Missing TLS Hostname Verification Vulnerability - Windows

Apache Active MQ is missing its TLS hostname verification. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...

Microsoft Windows Defender AV: Configure the Block at First Sight feature

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavblockatfirstsight.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure the 'Block at First Sight' feature Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Dell Laser MFP 2335dn Printer Password Disclosure Vulnerability - Active Check

Dell Laser MFP 2335dn Printer is prone to a password disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

CVE-2018-16794

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

CVE-2018-16794

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

Stack overflow

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

CVE-2018-16794

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

CVE-2018-17178

An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands sent to /bin/webserver on port 8081 if they already have an active session. Commands like forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed even though th...

Design/Logic Flaw

An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands sent to /bin/webserver on port 8081 if they already have an active session. Commands like forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed even though th...