3982 matches found
URL file scheme drive letter buffer overflow
When libcurl is given either 1. a file: URL that does not use two slashes following the colon, or 2. is told that file is the default scheme to use for URLs without scheme ... and the given path starts with a drive letter and libcurl is built for Windows or DOS, then libcurl would copy the path...
IBM Storwize for Lenovo initialization USB drives contain malware - Lenovo Support US
No description provided...
Microsoft Windows LNK File Remote Code Execution Vulnerability
Microsoft Windows is a family of operating systems released by Microsoft Corporation in the United States. lnk files are a type of file used to point to other files. A remote code execution vulnerability exists in Microsoft Windows LNK files. A malicious binary file containing a malicious LNK fil...
IBM Storwize for Lenovo initialization USB drives contain malware - us
Lenovo Security Advisory: LEN-14957 Potential Impact: Malware infection on system used to launch initialization tool Severity: Medium Summary Description: Some USB flash drives containing the initialization tool shipped with the IBM Storwize for Lenovo V3500, V3700 and V5000 Gen 1 storage systems...
Intel Solid State Drive Toolbox Local Elevation of Privilege Vulnerability
Intel Solid State Drive Toolbox is a driver management software from Intel USA for browsing SSD Solid State Drive information. A local elevation of privilege vulnerability exists in Intel Solid State Drive Toolbox versions prior to 3.4.5. A local attacker could exploit this vulnerability to load...
haltonhonda.com XSS vulnerability
Vulnerable URL: http://www.haltonhonda.com/new/book-a-test-drive/?vehicleid=8293418"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerabili...
CVE-2017-4897
VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this...
CVE-2017-5688
There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...
CVE-2017-5688
There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...
CVE-2017-5688
CVE-2017-5688 concerns Intel Solid State Drive Toolbox. The vulnerability affects Toolbox versions prior to 3.4.5 and enables a local, high-privilege attacker to load and execute arbitrary code. The issue is described as a local elevation of privilege; exploitation details are not provided in the...
Intel® Solid State Drive Toolbox™ Escalation of Privilege Vulnerability
Summary: There is an escalation of privilege vulnerability in the Intel® Solid State Drive Toolbox™ versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code. Description: There is an escalation of privilege vulnerability in the Intel® Solid State Drive...
Oracle VirtualBox Guest Additions 5.1.18 - Unprivileged Windows User-Mode Guest Code Double-Free
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1227 We have discovered a heap double-free vulnerability in the latest version of VirtualBox 5.1.18, with Guest Additions and more specifically shared folders enabled in the guest operating system. The heap memory corruption take...
Enable BitLocker on secondary drive causes Receiver installation to be corrupted
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. On a machine with Microsoft BItlocker data encryption on a secondary drive, while receiver is...
CVE-2017-5873
Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...
Windows PowerShell LLMNR/NBNS spoofer: Inveigh
Windows PowerShell LLMNR/NBNS spoofer Inveigh is a Windows PowerShell LLMNR/NBNS spoofer designed to assist penetration testers that find themselves limited to a Windows system. This can commonly occur while performing phishing attacks, USB drive attacks, VLAN pivoting, or simply being restricted...
How to configure Google Drive access from Receiver for Chrome
By enabling access to Google Drive from Receiver for Chrome, your users can seamlessly use existing Windows-based applications for example, Microsoft Word on a Chromebook and access the files residing on Google Drive.For example, if a user saves a file to Google Drive for instance, a .DOC file...
PVS Targets run chkdsk at boot after the vDisk has been modified
Every time a PVS Target Device boots from a vDisk the OS detects problems with the C: drive and automatically runs chkdsk at boot time. The following events might be observed in the Windows Event Log on the Target Device: Event Log: System Source: Ntfs Event ID: 55 Text: The file system structure...
Still Getting Served: A Look at Recent Malvertising Campaigns Involving Exploit Kits
Malvertising occurs when an online advertising network knowingly or unknowingly serves up malicious advertisements on a website. Malvertisements are a type of “drive-by” threat that tend to result in users being infected with malware for simply visiting a website. The victims of this threat are...
Still Getting Served: A Look at Recent Malvertising Campaigns Involving Exploit Kits
Malvertising occurs when an online advertising network knowingly or unknowingly serves up malicious advertisements on a website. Malvertisements are a type of “drive-by” threat that tend to result in users being infected with malware for simply visiting a website. The victims of this threat are...
