4318 matches found
CVE-2018-0764
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from...
Microsoft .NET Framework Security Feature Bypass And DoS Vulnerabilities (KB4054995)
This host is missing a critical security update according to Microsoft Security Updates KB4054995. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4055000)
This host is missing a critical security update according to Microsoft Security Updates KB4055000. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft .NET Framework 4.5.2 Multiple Vulnerabilities (KB4054994)
This host is missing an important security update according to Microsoft KB4054994 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4054998)
This host is missing a critical security update according to Microsoft Security Updates KB4054998. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft .NET Framework 4.5.2 Multiple Vulnerabilities (KB4054993)
This host is missing an important security update according to Microsoft KB4054993 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft .NET Framework 3.5 Multiple Vulnerabilities (KB4054997)
This host is missing an important security update according to Microsoft KB4054997 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4054999)
This host is missing an important security update according to Microsoft Security Updates KB4054999. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Security and Quality Rollup for .NET Framework (January 2018)
The .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A Denial of Service vulnerability exists when .NET, and .NET core, improperly process XML documents. An attacker who successfully exploited this...
Security Update for .NET Core (January 2018)
The remote Windows host has an installation of .NET Core with a version less than 2.0.5. Therefore, the host is affected by multiple vulnerabilities : - A security feature bypass in X509 Certificate Validation allows an attacker to present a certificate that is marked as invalid for a specific us...
USN-3517-1 poppler vulnerabilities
It was discovered that poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file, an attacker could execute arbitrary. CVE-2017-1000456 It was discovered that poppler incorrectly handled certain files. If a user or automated system were...
Automatize Obfuscation and Generation of MS Office Documents: macro_pack
The macropack is a tool used to automatize obfuscation and generation of MS Office documents for pentest, demo, and social engineering assessments. The goal of macropack is to simplify antimalware solutions bypass and automatize the process from vba generation to final Office document generation...
New Spider Ransomware Comes With 96-Hour Deadline
A new ransomware strain called Spider is targeting victims located in the Balkans in what is called a “mid-scale” campaign. The Spider ransomware is unique in that attackers are given a 96-hour deadline to pay. Attackers also attempt to calm victims, assuring them the ransom payment and file...
VK.com: Blind XXE on pu.vk.com
Blind XXE vulnerability in processing of uploaded documents. Blind XXE vulnerability in processing of uploaded XML-documents such as docx. Vulnerability was hard-exploitable, because all data retrieval channels did not work except DNS...
[SECURITY] Fedora 26 Update: transfig-3.2.6a-1.fc26
The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Install transfig...
Threat Outbreak Alert RuleID31571: Email Messages Distributing Malicious Software on December 8, 2017
Medium Alert ID: 56201 First Published: 2017 December 8 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31571 may contain the following files: Name |...
Former NSA Employee Pleads Guilty to Taking Classified Data
A former employee for the National Security Agency pleaded guilty on Friday to taking classified data to his home computer in Maryland. According to published reports, U.S. intelligence officials believe the data was then stolen from his computer by hackers working for the Russian government. Ngh...
Here's the NSA Employee Who Kept Top Secret Documents at Home
A former employee—who worked for an elite hacking group operated by the U.S. National Security Agency—pleaded guilty on Friday to illegally taking classified documents home, which were later stolen by Russian hackers. In a press release published Friday, the US Justice Department announced that...
MGASA-2017-0430 Updated ghostscript packages fix security vulnerabilities
Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...
