8402 matches found
Exploit for CVE-2018-11776
CVE-2018-11776 Proof of Concept exploit so I could quickly as...
Good Primer on Two-Factor Authentication Security
Stuart Schechter published a good primer on the security issues surrounding two-factor authentication. While it's often an important security measure, it's not a panacea. Stuart discusses the usability and security issues that you have to think about before deploying the system...
Setting Azure Accelerated Networking on an ELM deployed before version 4.13
Prior to App Layering 4.13, the ELM was provisioned with a NIC that did not have Azure Accelerated Networking enabled. This feature was not fully supported by Microsoft on Linux guests prior to this point. Please note that upgrading to App Layering 4.13 will NOT change the NIC configuration. The...
[SECURITY] Fedora 27 Update: docker-latest-1.13.1-37.git9cb56fd.fc27
Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...
IBM UrbanCode Deploy Directory Traversal Vulnerability
IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...
Linux Kernel IP Vulnerability 2
On the week of July 15th, researcher Juha-Matti Tilli disclosed a vulnerability in the Linux kernel to the kernel maintainers, the National Cyber Security Center - Finland NCSC-FI, CERT Coordination Center CERT/CC, and Akamai. The vulnerability, CVE-2018-5391, is a resource exhaustion attack...
wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...
wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...
wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4022236) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for Excel 2016: August 14, 2018
None None...
Description of the security update for SharePoint Server 2013: August 14, 2018
Description of the security update for SharePoint Server 2013: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for Word Viewer: August 14, 2018 (KB4092433)
None None...
Description of the Security Only update for .NET Framework 3.5 for Windows Server 2012 (KB 4344175)
Description of the Security Only update for .NET Framework 3.5 for Windows Server 2012 KB 4344175 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This security update resolves an information disclosure vulnerability in Microsoft .NET Framework that could allow an...
Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4344166)
Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 KB 4344166 Summary This security update resolves an information disclosure vulnerability in Microsoft .NET Framework that could allow an attacker to acce...
Description of the security update for Outlook 2010: August 14, 2018
Description of the security update for Outlook 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures ADV180021. Note To apply this security update, you must hav...
Description of the security update for SharePoint Server 2010: August 14, 2018
Description of the security update for SharePoint Server 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: August 14, 2018
None None...
Description of the security update for Microsoft Office Viewers and Office Compatibility Pack: August 14, 2018
None None...
Description of the security update for Office 2010: August 14, 2018
Description of the security update for Office 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...