PT-2018-11033

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 3.5.0.1 Description The issue concerns a privilege escalation in file permissions, potentially allowing an authenticated user to execute code as an administrator via local access...

Intel® Driver & Support Assistant and Intel® Software Asset Manager Advisory

Summary: Potential security vulnerabilities in Intel® Driver & Support Assistant, Intel® Software Asset Manager and Intel® Computing Improvement Program may allow escalation of privilege. Intel is releasing Intel® Driver & Support Assistant updates to mitigate these potential vulnerabilities...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8.0 used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in April 2018. Vulnerability Details CVEID: CVE-2018-2790 DESCRIPTION: An unspecified vulnerability...

Security Bulletin: IBM Support Assistant is affected by a WebSphere Application Server vulnerability

Summary IBM Support Assistant has addressed the vulnerability in WebSphere Application Server affecting installations using Form Login. Vulnerability Details CVEID: CVE-2017-1788 DESCRIPTION: IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conducts...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server (CVE-2014-6457)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 1.7.0 that is used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in October 2014. One of these vulnerabilities affects the IBM Support...

Making Expect scripts for SSH Authentication and Privilege Elevation

Expect can help you to automate interactive console applications. For example, expect script can go to some Linux host via SSH with password authentication, make additional authentication procedures su, sudo to elevate privileges and execute some commands. Like Vulnerability and Compliance...

Cisco Network Assistant Denial of Service Vulnerability

Cisco Network Assistant CNA is cisco launched an enterprise-class Cisco switch graphical interface management tool, which can be used to configure Cisco devices, such as: Catalyst switches, PIX firewalls, IP phones, and wireless access points, etc., CNA are supported as long as the face of small...

Cisco Network Assistant 6.3.3 Denial Of Service

Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-27 Vendor Homepage: https://www.cisco.com/ Software Link : https://software.cisco.com/download/home/286277276/type/280775097/release/6.3.3 Tested Version: 6.3.3...

Cisco Network Assistant 6.3.3 - Cisco Login Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://www.cisco.com/ Software Link : https://software.cisco.com/download/home/286277276/type/280775097/release/6.3.3...

Cisco Network Assistant 6.3.3 - Cisco Login Denial of Service (PoC)

Cisco Network Assistant 6.3.3 - Cisco Login Denial of Service PoC Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-27 Vendor Homepage: https://www.cisco.com/ Software Link :...

Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service (PoC)

Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-27 Vendor Homepage: https://www.cisco.com/ Software Link : https://software.cisco.com/download/home/286277276/type/280775097/release/6.3.3 Tested Version: 6.3.3...

Home Assistant Dashboard No Password (HTTP)

By default, the full control dashboard in older versions of Home Assistant does not require a password. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Home Assistant Detection (HTTP)

HTTP based detection of Home Assistant. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113249";...

The vulnerability of the SuperCluster Virtual Assistant component of the Oracle SuperCluster software platform allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the SuperCluster Virtual Assistant component of the Oracle SuperCluster-specific software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data, causing system crashes or unexpected...

PT-2018-1489

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Description The issue is related to an elevation of privilege vulnerability in Microsoft Cortana, which allows arbitrary website browsing on the lockscreen. This is due to insufficient access restrictions in the...

CVE-2017-3210

Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the...

CVE-2017-3210

The CVE-2017-3210 issue affects Portrait Displays SDK services where pdiservice.exe runs with NT AUTHORITY/SYSTEM permissions and is writable by all Authenticated Users, enabling local privilege escalation. Affected applications include Portrait Display SDK-based tools such as Fujitsu DisplayView...

CVE-2017-3210 Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution

Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the...

CVE-2018-2932: Undefined Security Weakness

Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite subcomponent: SuperCluster Virtual Assistant. The supported version that is affected is Prior to 2.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access...

Lenovo Smart Assistant Android app privilege acquisition vulnerability

Lenovo Smart Assistant Android app is an Android-based application for controlling Lenovo Smart Assistant smart speakers from Lenovo China. A security vulnerability exists in the Lenovo Smart Assistant Android app versions prior to 12.1.82. An attacker can use this vulnerability to enter factory...