November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-142 Cumulative security update for Internet Explorer: November 8, 2016 MS16-140 Security updat...

VHD Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Virtual Hard Disk Drive fails to properly handle user access to certain files. An attacker who successfully exploited the vulnerability could manipulate files in locations not intended to be available to the user. To exploit the...

November 8, 2016 — KB3198585 (OS Build 10240.17190)

None None...

Open-Xchange: Selecting encryption for email with drive attachment overrides the drive email password

If you start composing a new email to an external email, otherwise decryption fails, attach a document, then click "Use drive mail", and set a password. Then click "Security" then encrypt not by clicking the lock icon, as that will show the warning and disable drive mail attachments. When you sen...

Google spreadsheet CSRF+JSON hijacking vulnerabilities-vulnerability warning-the black bar safety net

In 2 0 1 5 years 1 0 months I am in the Google spreadsheet for the API interface found in the JSON + CSRF（cross-site forgery requests, Clickjacking vulnerability. An attacker can exploit this vulnerability in not authorized to access Google Drive files of the case, to obtain the user of the...

Security Advisory - PXN Defense Mechanism Failure Vulnerability in Huawei Mobile Phones

There is a Privileged Execute-Never PXN defense mechanism failure vulnerability in the drive code of some Huawei mobile phones. An attacker may trick users into installing malicious apps which can disable the PXN defense mechanism by invoking related drive code to crash the system or escalate...

Beware of Hicurdismos: It’s a fake Microsoft Security Essentials installer that can lead to a support call scam

Note: Our Tech support scams FAQ page has the latest info on this type of threat, including scammer tactics, fake error messages, and the latest scammer hotlines. Wouldn’t it be a shame if, in trying to secure your PC, you inadvertently install malware and run the risk of being scammed? We recent...

Turkey Blocks GitHub, Google Drive and Dropbox to Censor RedHack Leaks

Turkey is again in the news for banning online services, and this time, it's a bunch of sites and services offered by big technology giants. Turkey government has reportedly blocked access to cloud storage services including Microsoft OneDrive, Dropbox, and Google Drive, as well as the code hosti...

How to Install Storefront on a Non-System Drive

Install Storefront on a non-system drive...

Anonymous Offline Communications System: PirateBox

Anonymous Offline Communications System PirateBox creates offline wireless networks designed for anonymous file sharing, chatting, message boarding, and media streaming. You can think of it as your very own portable offline Internet in a box! When users join the PirateBox wireless network and ope...

CVE-2016-5793

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

How to attach USB drive as a local Storage on XenServer

To attach a USB drive as a local storage on XenServer Host...

WAS - Automatic USB Drive Malware Scanning Tool For The Security-Minded Person

Author: Fabio Baroni http://www.pentest.guru/ @Fabiothebest89 How many times have you plugged in a USB drive and double clicked on a file without scanning for malware? I guess, MANY. Wait A Sec! Even if you are a security guy, you'll often be in a hurry or absent minded and you trust your USB dri...

SSD Firmware Information Disclosure Vulnerability in Multiple Lenovo Products

An information disclosure vulnerability exists in the SSD firmware of multiple Lenovo products. An attacker can exploit the vulnerability to obtain sensitive information, which could lead to further attacks...

Denial of Service Vulnerability in Multiple Intel Solid-State Drive DC Series Products

The Intel Solid-State Drive DC series is available in some Lenovo System X servers. A denial of service vulnerability exists in multiple Intel Solid-State Drive DC Series products. An attacker could exploit the vulnerability to cause a denial of service condition...

Academics Devise New Way to Steal Data from Air-Gapped Computers

Stealing data from air-gapped computers is one of the great exercises in computer security: advanced attackers covet what’s stored on these isolated machines, while researchers try to figure out the novel ways adversaries could jump those gaps. The latest effort doesn’t involve USBs, heat,...

NUUO NVRmini 2 3.0.8 - Remote Root Exploit

Exploit for php platform in category web applications !/usr/bin/env python NUUO Remote Root Exploit Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simple and easy,...

Never Trust a Found USB Drive, Black Hat Demo Shows Why

Does dropping an infected USB drive in a parking lot work when it comes to a hacker luring its prey into a digital trap? The answer is a resounding yes. At Black Hat USA, security researcher Elie Bursztein shared the results of an experiment where he dropped 297 USB drives with phone-home...

Android 8 on the security patch risk assessment-vulnerability warning-the black bar safety net

This month, a total of 1 0 5 a security vulnerability,wherein Critical: 1 to 3 High: 7 to 9 Moderate13 a Wherein: belongs to the Aosp section of a 2 6, the drive and the kernel of a 7 9 one. The following is the 7 month the number of vulnerabilities comparison chart: ! ! Vulnerability distributio...