991 matches found
Building a world without passwords
Nobody likes passwords. They are inconvenient, insecure, and expensive. In fact, we dislike them so much that weve been busy at work trying to create a world without them a world without passwords. In this blog, we will provide a brief insight into how we at Microsoft think about solving this...
April 23, 2018—KB4093105 (OS Build 16299.402)
None None...
PT-2018-3641 · Openssl +11 · Openssl +11
Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.1.1 through 1.1.1j MySQL Server versions 5.7.33 and earlier, 8.0.23 and earlier Description: The issue is related to a NULL pointer dereference in OpenSSL TLS servers when a maliciously crafted renegotiation ClientHello...
Move away from passwords, deploy Windows Hello. Today!
Something we understood from the very beginning with Windows Hello for Business is our customers would approach Windows 10 in a series of phases. The first phase is to simply deploy the platform itself. From there, additional phases would follow to take advantage of optional Windows 10 technologi...
October 17, 2017—KB4041688 (OS Build 14393.1794)
None None...
gnutls: Crash upon receiving well-formed status_request extension
A null pointer dereference flaw was found in the way GnuTLS processed ClientHello messages with statusrequest extension. A remote attacker could use this flaw to cause an application compiled with GnuTLS to crash...
GnuTLS status_request Extension Null Pointer Dereference (CVE-2017-7507)
A denial of service vulnerability exists in the GnuTLS library. The vulnerability is due to improper parsing of certain values in the statusrequest extension. A remote attacker can exploit this vulnerability by sending a crafted Client Hello to the target server...
broadcast-ospf2-discover NSE Script
Discover IPv4 networks using Open Shortest Path First version 2OSPFv2 protocol. The script works by listening for OSPF Hello packets from the 224.0.0.5 multicast address. The script then replies and attempts to create a neighbor relationship, in order to discover network database. If no interface...
CVE-2017-5872
The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...
Hello Kitty Database of 3.3 Million Users Surfaces
A cache of data including 3.3 million user credentials belonging to Hello Kitty parent company Sanrio surfaced over the weekend. The breach was originally reported in December 2015, but at the time Sanrio denied any data was stolen as part of the breach. The breach was tied to a misconfigured...
Once due to bug fixes to trigger the vulnerability—CVE-2016-6309 vulnerability detailed analysis-vulnerability warning-the black bar safety net
openssl released a security level for”serious”UAF vulnerability, the exploit is simple, only need to send a tcp packet will trigger the vulnerability, but the consequences are serious, may result in TLS-related applications denial of service or even arbitrary code execution and other consequences...
The vulnerability of Cisco IPS software allows a malicious actor to trigger a service failure.
The vulnerability in the dtls1getmessagefragment function in d1both.c of OpenSSL allows malicious actors to induce a service failure recursion and abnormal client termination by using the DTLS hello message in an invalid manner...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability in the sslsetclientdisabled function in t1lib.c of OpenSSL allows remote SSL servers to trigger a service failure by replacing the null pointer and terminating the client application abnormally, using the ServerHello message. This message includes the SRP crypto packet without...
The vulnerability of the VLC Media Player software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
Overfilling the buffer in the readserverhello function in lib/gnutlshandshake.c in GnuTLS allows remote servers to trigger a service failure a memory-related error or execute arbitrary code using the long session identifier in the ServerHello message...
Clair - Vulnerability Static Analysis for Containers
Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers. Vulnerability data is continuously imported from a known set of sources and correlated with the indexed contents of container images in order to produce lists of vulnerabilities that threaten...
Cisco NX-OS Software Label Distribution Protocol Message Vulnerability (Cisco-SA-20140123-CVE-2014-0677)
A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. Copyright C 2016 Greenbone Networks GmbH Some text...
The vulnerability of the OpenSSL library, which allows a hacker to break the cryptographic security mechanism
The vulnerability of the ssl/s2srvr.c function in the OpenSSL library is related to errors in cryptographic transformations. Exploiting this vulnerability allows a malicious actor to break the cryptographic security mechanism by performing calculations related to SSLv2 traffic, involving function...
Hello Kitty Nail Salon - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hello Kitty Nail Salon published at the 'play' market has multiple vulnerabilities...
Hello Kitty Seasons - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hello Kitty Seasons published at the 'play' market has multiple vulnerabilities...
Hello Kitty Christmas Puzzles - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hello Kitty Christmas Puzzles published at the 'play' market has multiple vulnerabilities...