974 matches found
PT-2018-6841 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.8 Description: The issue arises from improper validation of the sigevent-sigev notify field in the timer create syscall implementation. This leads to out-of-bounds access when the show timer function is...
Checkpoint Gaia Portal WebUI Detection
Binary data checkpointgaiawebuidetect.nbin...
Reaper: Calm Before the IoT Security Storm?
It's been just over a year since the world witnessed some of the world's top online Web sites being taken down for much of the day by "Mirai," a zombie malware strain that enslaved "Internet of Things" IoT devices such as wireless routers, security cameras and digital video recorders for use in...
Microsoft’s October Patch Batch Fixes 62 Flaws
Microsoft on Tuesday released software updates to fix at least 62 security vulnerabilities in Windows, Office and other software. Two of those flaws were detailed publicly before yesterday's patches were released, and one of them is already being exploited in active attacks, so attackers already...
The vulnerability of the sanity_check_ckpt function in the Linux operating system, which allows a malicious actor to exploit their privileges
The vulnerability of the sanitycheckckpt function in the Linux operating system’s fs/f2fs/super.c file arises from incorrect checks for indexing arrays blkoff and segno. Exploiting this vulnerability can allow a local attacker to increase their privileges using undefined vectors...
Linux kernel elevation of privilege vulnerability (CNVD-2017-24353)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A q elevation of privilege vulnerability exists in the 'sanitycheckckpt' function in the fs/f2fs/super.c file in versions of Linux kernel prior to 4.12.4, which stems from the...
Nigerian Man Hacked Thousands of Global Oil & Gas and Energy Firms
By Uzair Amir The IT security researchers at CheckPoint cyber security firm headquartered in This is a post from HackRead.com Read the original post: Nigerian Man Hacked Thousands of Global Oil Gas and Energy Firms...
‘Fireball’ Malware Infected 250 Million Mac and Windows Devices
By Jahanzaib Hassan Since the spread of WannaCry ransomware attack the cyber security community is doing whatever it takes to identify new threats against unsuspecting users. The recent discovery by security researchers is a threat to both Windows and Mac users. Checkpoint has recently revealed a...
Judy Android Malware Infects Over 36.5 Million Google Play Store Users
Security researchers have claimed to have discovered possibly the largest malware campaign on Google Play Store that has already infected around 36.5 million Android devices with malicious ad-click software. The security firm Checkpoint on Thursday published a blog post revealing more than 41...
PT-2017-2769 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12.4 Description: The issue is related to the sanity check ckpt function in fs/f2fs/super.c of the Linux kernel, which incorrectly checks the indexing of the blkoff and segno arrays. This can be exploited by a...
Microsoft Office Word Malicious Hta Execution
This module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how a olelink object can make a https request, and execute hta code in response. This bug was originally seen being exploited in the wild starting in...
No More Ransom — 15 New Ransomware Decryption Tools Available for Free
No More Ransom, so is the Ransomware Threat. Launched less than a year ago, the No More Ransom NMR project has increased its capacity with new partners and new decryption tools added to its now global campaign to combat Ransomware. Started as a joint initiative by Europol, the Dutch National...
Information Disclosure Via Checkpoint Directory Permission
flink-runtime is vulnerable to information disclosure. The vulnerability can happen because it creates checkpoint directory without specified permission, allowing another user to delete or read files under it. Therefore it can cause restore failure or information disclosure...
Over 1 Million Google Accounts Hacked by 'Gooligan' Android Malware
If you own an Android smartphone, Beware! A new Android malware that has already breached more than 1 Million Google accounts is infecting around 13,000 devices every day. Dubbed Gooligan, the malware roots vulnerable Android devices to steal email addresses and authentication tokens stored on...
CRIU Information Disclosure Vulnerability
CRIU Checkpoint/Restore In Userspace is a set of Linux userspace userspace on the implementation of the checkpoint/restore function of the software to freeze and restore the execution of tools. The tool supports freezing or partially freezing the execution of an application and saving its executi...
CRIU Privilege Acquisition Vulnerability
CRIU Checkpoint/Restore In Userspace is a set of Linux userspace userspace on the implementation of the checkpoint/restore function of the software to freeze and restore the execution of tools. The tool supports freezing or partially freezing the execution of an application and saving its executi...
UBUNTU-CVE-2015-5231
The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...
drchrono: node.drchrono.com - Information Disclosure and Windows Host Exposed
This host has the following TCP ports open; 21 - FTP 22 - SSH 135 - Windows RPC Dynamic 445 - Microsoft DS 3389 - Remote Desktop 5986 - PowerShell Remoting 47001 - WinRM The server appears to be secured well on the whole. However the services SSH and FTP do all give out some information. Please s...
community.checkpoint.com XSS vulnerability
Vulnerable URL: https://community.checkpoint.com/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclos...
