CVE-2017-1000386

The CVE-2017-1000386 entry relates to the Jenkins Active Choices plugin (versions 1.5.3 and earlier). The vulnerability arises because a user with Job/Configure permission could provide arbitrary HTML in the Active Choices Reactive Reference Parameter, which could render on the Build With Paramet...

CVE-2017-1000386

Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With Parameters' page through the 'Active Choices Reactive Reference Parameter' type. This could include, for example, arbitrary JavaScript. Acti...

UBUNTU-CVE-2018-5116

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...

HPSBHF03576 rev. 3 - Intel AMT MEBx Bypass

Potential Security Impact Elevation of Privilege/Information Disclosure. Reported by: F-Secure, Google VULNERABILITY SUMMARY Un-provisioned Intel® vPro™ platforms containing Intel® Active Management Technology Intel® AMT are vulnerable to unauthorized local provisioning via physical access. The...

January 18, 2018—KB4075200 (OS Build 10586.1358)

None None...

Intel AMT has a high-risk security vulnerability

Intel AMT, known as INTEL Active Management Technology Intel Active Management Technology, is essentially an embedded system integrated into the chipset, independent of a specific operating system. The technology allows administrators to remotely manage and repair networked computer systems, and...

Intel Management Engine Active Management Technology (AMT) Remote Access Enabled

Binary data intelamtremotedetect.nbin...

Apache Active MQ 5.14.1 XSS Vulnerability - Linux

Apache Active MQ 5.x before 5.14.1 is prone to an authenticated XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

Disabling automatic password change for nonpersistent desktops

Computers use their machine account password for authentication with Active Directory. By default, computers are configured to change their machine account passwords every 30 days. This setting affects nonpersistent desktops in the following ways: 1. When you deploy the nonpersistent desktop, the...

Apache Active MQ 5.14.1 XSS Vulnerability - Windows

Apache Active MQ 5.x before 5.14.1 is prone to an authenticated XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

Sangoma NetBorder/Vega Session Controller < 2.3.12-80-GA RCE Vulnerability - Active Check

Sangoma NetBorder/Vega Session Controller is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

ADRecon - Tool Which Gathers Information About The Active Directory

ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...

Vulners Nmap plugin

In previous post about Vulners vulnerability detection plugins for Burp and Google Chrome, I mentioned that it would be great to have a plugin for some free publicly available tool, like Nmap. And guys from the Vulners Team have recently released Nmap plugin. Isn't it awesome? To detect...

CVE-2017-14385

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...

Design/Logic Flaw

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...

Permissions Flaw Found on Azure AD Connect

A permissions flaw in Microsoft’s Azure AD Connect software could allow a rogue admin to escalate account privileges and gain unauthorized universal access within a company’s internal network. Microsoft issued an advisory for the vulnerability on Tuesday. Affected are Office 365 customers running...

Description of the security update for SharePoint Server 2016: December 12, 2017

None None...

The numerous vulnerabilities of the Active Management Technology (AMT) and Intel Management Engine (ME) microprogramming systems within the Platform Controller Hub family allow for the execution of arbitrary code.

Multiple vulnerabilities exist in the Active Management Technology AMT and Intel Management Engine microprogramming systems of the Platform Controller Hub PCH family, which serve as south bridges. These vulnerabilities are caused by buffer overflow attacks. Exploitation of these vulnerabilities...

The numerous vulnerabilities of the Active Management Technology (AMT) and Intel Management Engine (ME) microprogramming systems within the Platform Controller Hub family enable the execution of arbitrary code.

The multiple vulnerabilities of the Active Management Technology AMT and Intel Management Engine ME in the microprogramming software of the Platform Controller Hub PCH family, which serve as south bridges, are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicio...

The numerous vulnerabilities of the Active Management Technology (AMT) and Intel Management Engine (ME) microprogramming systems within the Platform Controller Hub family enable the execution of arbitrary code.

The multiple vulnerabilities of the Active Management Technology AMT and Intel Management Engine ME in the microprogramming software of the Platform Controller Hub PCH family, which serve as south bridges, are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicio...