CVE-2015-7963: Undefined Security Weakness

SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7598: Undefined Security Weakness

SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7597: Undefined Security Weakness

SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7962: Undefined Security Weakness

SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

PT-2018-4427

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service End User Software Tools for Windows affected versions not specified Description The issue concerns a weak Access Control List ACL used by the software for certain installation directories and executable modules...

PT-2018-4428

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service IIS Agent affected versions not specified Description The issue is related to a weak Access Control List ACL used by the SafeNet Authentication Service IIS Agent for certain installation directories and executabl...

PT-2018-4429

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service TokenValidator Proxy Agent affected versions not specified Description The issue concerns a weak Access Control List ACL used by the SafeNet Authentication Service TokenValidator Proxy Agent for certain...

PT-2018-4432

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service for Outlook Web App Agent affected versions not specified Description The issue concerns a weak Access Control List ACL used by the SafeNet Authentication Service for Outlook Web App Agent for certain installatio...

PT-2018-4434

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service for NPS Agent affected versions not specified Description The issue concerns a weak Access Control List ACL used by the SafeNet Authentication Service for NPS Agent for unspecified installation directories and...

PT-2018-4437

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service for Citrix Web Interface Agent affected versions not specified Description The issue is related to a weak Access Control List ACL used by the SafeNet Authentication Service for Citrix Web Interface Agent for...

CVE-2015-7596: Undefined Security Weakness

SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7967: Undefined Security Weakness

SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

Stack Overflow Vulnerability in WPS Office 2016 Presentation

WPS office is an office software suite independently developed by Kingsoft Corporation. A stack overflow vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by an attacker to cause a denial of service attack...

Denial of Service Vulnerability in WPS Office 2016 Presentation (CNVD-2018-04912)

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by attackers to cause a denial of service attack...

UBUNTU-CVE-2018-7568

The parsedie function in dwarf1.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer overflow and application crash via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm...

DEBIAN-CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

DEBIAN-CVE-2018-7570

The assignfilepositionsfornonloadsections function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an ELF file with a RELRO segment that lack...

CannibalRAT targets Brazil

This post was authored by Warren Mercer and Vitor Ventura Introduction Talos has identified two different versions of a RAT, otherwise known as a remote access trojan, that has been written entirely in Python and is wrapped into a standalone executable. The RAT is impacting users of a Brazilian...

Denial of Service Vulnerability in WPS Office 2016 Forms

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS Formset.exe in WPS when parsing a specific xls file. An attacker can exploit the vulnerability to cause a denial of service...

Threat Analysis: ROKRAT Malware

ROKRAT also referred to as DOGcall is a family of malware that has been used by attackers originating from North Korea. The family continues to evolve and adopt techniques from other families also used by the same attack group. The ROKRAT core payload is typically deployed by a loader, which has...