171 matches found
StrongPity APT Changes Tactics to Stay Stealthy
The APT group behind the sophisticated malware known as StrongPity a.k.a. Promethium has changed its tactics, after various research groups analyzed the malware and exposed its methods of deployment. The efforts have allowed the group to return to hidden status, even after being labeled a known...
dpi-aufkleber-shop.de XSS vulnerability
Open Bug Bounty ID: OBB-686108 Description| Value ---|--- Affected Website:| dpi-aufkleber-shop.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
Unable to un-check the "Disable display scaling on high DPI settings" for Citrix Desktop Viewer
Citrix Desktop Viewer is unable to reach the correct resolution of a 4k monitor. Max resolution by the monitor is 3840 x 2160 but when launched Desktop Viewer is able to reach only 2560 x 1440. Changing the High DPI settings to use the native resolution Advanced High DPI, Select "No, use native...
CVE-2018-1174
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Windows 10 October 2018 Update (v1809) – Citrix Known Issues
Microsoft releases software updates for Windows 10 twice a year through the Semi-Annual Channel. On 2nd October2018, Microsoft released its latest Semi-Annual Channel release for Windows 10 called 'October 2018 Update' v1809. This article is intended to capture known issues with Windows 10...
Zomato: Clickjacking: Delete Account, Change privacy settings, Rate business, follow/unfollow (IE)
Inspired by report 337219. Please note that this report includes a clear security impact as well as a proof of concept. CVSS ---- medium 5.0 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L Description ----------- The application does not send a X-Frame-Options header, thus allowing pages to be...
Fedora 26 : qt5-qtwebengine (2018-c0d3db441f)
This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update. This update includes : - Security fixes from Chromium up to version 64.0.3282.140. Including:...
Fedora 27 : qt5-qtwebengine (2018-e08d828ed9)
This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update. This update includes : - Security fixes from Chromium up to version 64.0.3282.140. Including:...
Configuration of DPI matching and client-side scaling with Citrix Workspace app for Windows
DPI scaling is a critical consideration when using high-resolution monitors over 1920x1080 with Citrix Virtual Apps and Desktops. Without the proper product versions and configuration, the Citrix session could be displayed at resolutions and scales that diverge from the local client configuration...
Design/Logic Flaw
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...
CVE-2017-11401
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...
CVE-2017-11401
The CVE-2017-11401 issue affects Belden Hirschmann Tofino Xenon Security Appliance prior to 03.2.00. The ModBus DPI filter mishandles the mbap.length field in ModBus packets, allowing crafted/malformed packets to bypass function-code filtering and reach protected assets. This is a network‑level b...
CVE-2017-11401
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...
NET Debugger & Assembly Editor: dnSpy
dnSpy is a tool to reverse engineer .NET assemblies. It includes a decompiler, a debugger and an assembly editor and more and can be easily extended by writing your own extension. It uses dnlib to read and write assemblies so it can handle obfuscated assemblies eg. malware without crashing...
End of support for Office 2013
End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...
Description of the security update for Office 2013: May 9, 2017
Description of the security update for Office 2013: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Signaling - DPI...
CVE-2013-5512
Race condition in the HTTP Deep Packet Inspection DPI feature in Cisco Adaptive Security Appliance ASA Software 8.2.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.45.5, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.4, 9.0.x before 9.01.4, and 9.1.x before 9.11.2, in certai...
CVE-2013-5512
CVE-2013-5512 is the race-condition vulnerability in Cisco ASA HTTP Deep Packet Inspection (DPI). Affected Cisco ASA Software multiple branches (8.2.x through 9.1.x) experience a DPI engine race under certain conditions (spoof-server option or ActiveX/Java response inspection) that can cause a re...
PT-2013-5596 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2.x through 8.25.45 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.45.4 Cisco...