Update Rollup 10 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 10 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the new features that are added and the issues that are fixed in Update Rollup 10 for Microsoft System Center 2012 R2 Virtual Machine Manager. The following updates are available for System Cent...

Parrot Security 3.3 - Security GNU/Linux distribution designed with cloud pentesting and IoT security in mind

Security GNU/Linux distribution designed with cloud pentesting and IoT security in mind. It includes a full portable laboratory for security and digital forensics experts, but it also includes all you need to develop your own softwares or protect your privacy with anonymity and crypto tools...

Siemens Patches Insufficient Entropy Vulnerability in ICS Systems

German industrial giant Siemens has provided a firmware update addressing vulnerabilities that are found in a popular line of its Desigo PX industrial control hardware used in controlling primarily HVAC systems in commercial buildings . On Wednesday, Siemens, in coordination with ICS-CERT, issued...

x86: missing NULL pointer check in VMFUNC emulation

ISSUE DESCRIPTION When support for the Intel VMX VMFUNC leaf 0 was added, a new optional function pointer hvmemulvmfunc was added to the hvmemulateops table. As is intended, that new function pointer is NULL on non-VMX hardware, including AMD SVM hardware. However at a call site, the necessary NU...

Ubuntu: Security Advisory (USN-3160-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google 'Android Things' — An Operating System for the Internet of Things

Google announced a Developers Preview of "Android Things" — an Android-based operating system platform for smart devices and Internet of Things IoT products. The Android-based Internet of Things OS is designed to make it easier for developers to build a smart appliance since they will be able to...

x86: Mishandling of SYSCALL singlestep during emulation

ISSUE DESCRIPTION The typical behaviour of singlestepping exceptions is determined at the start of the instruction, with a DB trap being raised at the end of the instruction. SYSCALL and SYSRET, although we don't implement it behave differently because the typical behaviour allows userspace to...

QEMU 'hw/display/virtio-gpu.c' denial of service vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the hw/display/virtio-gpu.c file in QEMU. An attacker can exploit this vulnerability to cause a...

Netgear R7000 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netgear R7000 - XSS via. DHCP hostname Date: 11-12-2016 Exploit Author: Vincent Yiu Contact: https://twitter.com/vysecurity Vendor Homepage: https://www.netgear.com/ Category: Hardware / WebApp Version: V1.0.7.21.1.93 +...

CVE-2016-7157

The 1 mptsasconfigmanufacturing1 and 2 mptsasconfigioc0 functions in hw/scsi/mptconfig.c in QEMU aka Quick Emulator allow local guest OS administrators to cause a denial of service QEMU process crash via vectors involving MPTSASCONFIGPACK...

Design/Logic Flaw

Use-after-free vulnerability in the vmxnet3iobar0write function in hw/net/vmxnet3.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service QEMU instance crash by leveraging failure to check if the device is active...

Researchers Question Security in AMD's Upcoming Zen Chips

As more computing heads to the clouds, security researchers are questioning the security of virtual machine control panels called hypervisors. One of the first hardware-based solutions to address these concerns will be deployed by chip manufacturer AMD, called Secure Encrypted Virtualization. The...

Netgear R7000 Command Injection

Exploit Title: Netgear R7000 - Command Injection Date: 6-12-2016 Exploit Author: Acew0rm Contact: https://twitter.com/Acew0rm1 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 -Vulnerability An unauthenticated user can inject commands threw...

Netgear R7000 - Command Injection Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Netgear R7000 - Command Injection Date: 6-12-2016 Exploit Author: Acew0rm Contact: https://twitter.com/Acew0rm1 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 -Vulnerability An unauthenticat...

NetApp hardware VSS provider limitation

Challenge Hyper-V Backup/Replication Job utilizing NetApp Data ONTAP VSS Hardware Provider reports warning or error message: "Another shadow copy creation is already in progress. Please wait a few moments and try again" Cause NetApp hardware VSS provider doesn't allow concurrent snapshot creation...

NETGEAR R7000 - Command Injection

NETGEAR R7000 - Command Injection Exploit Title: Netgear R7000 - Command Injection Date: 6-12-2016 Exploit Author: Acew0rm Contact: https://twitter.com/Acew0rm1 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 -Vulnerability An unauthenticated user can inject...

Ubuntu: Security Advisory (USN-3151-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hashcat v3.20 - World's Fastest and Most Advanced Password Recovery Utility

hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 160 highly-optimized hashing algorithms. hashcat currently supports CPU's, GPU's other hardware-accelerators on Linux, Windows and OSX, and has facilities to help enable...

FreeBSD : xen-kernel -- x86 null segments not always treated as unusable (50ac2e96-ba4d-11e6-ae1b-002590263bf5)

The Xen Project reports : The Xen x86 emulator erroneously failed to consider the unusability of segments when performing memory accesses. The intended behaviour is as follows: The user data segment %ds, %es, %fs and %gs selectors may be NULL in 32-bit to prevent access. In 64-bit, NULL has a...

ARM guests may induce host asynchronous abort

ISSUE DESCRIPTION Depending on how the hardware and firmware have been integrated, guest-triggered asynchronous aborts SError on ARMv8 may be received by the hypervisor. The current action is to crash the host. A guest might trigger an asynchronous abort when accessing memory mapped hardware in a...