Total AV 4.6.19 Insecure Permissions

===== Tempest Security Intelligence - ADV-23/2018 === Total AV 4.1.7 4 .6.19 - Insecure Permissions ------------------------------------------------------- Author: - Filipe Xavier Oliveira: ===== Table of Contents ===================================================== Overview Detailed description...

PT-2018-5606

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Governance and Intelligence Virtual Appliance versions 5.2 through 5.2.3.2 Description: The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow 'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackListed ByVal strIP As String As Long" m...

ISS For Business 14.0.1400.2029 Blue Screen Of Death Vulnerability

In MicroWorld eScan Internet Security Suite ISS for Business version 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD. ===== Tempest Security Intelligence - ADV-24/2018 === eScan ISS for...

CVE-2017-1367: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 1268...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow

'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackListed ByVal strIP As String As Long" memberName = "IsBlackListed" progid = "GDASPAMLib.AntiSpam...

Cb Customer Spotlight Series: Q & A with Project Worldwide’s Thomas Munson

Everyday, Carbon Black customers are working together to keep their organizations safe from cyber attacks. To share the knowledge our customers have with the greater security community, we are excited to announce the launch of the Cb Customer Spotlight Series. The Cb Customer Spotlight Series...

Hawkeye Keylogger – Reborn v8: An in-depth campaign analysis

Much of cybercrime today is fueled by underground markets where malware and cybercriminal services are available for purchase. These markets in the deep web commoditize malware operations. Even novice cybercriminals can buy malware toolkits and other services they might need for malware campaigns...

Cross site scripting

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2018-2427

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports version for Visual Studio .NET, Version 2010 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application...

CVE-2018-2427

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports version for Visual Studio .NET, Version 2010 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application...

CVE-2018-2432

CVE-2018-2432 affects SAP BusinessObjects BI Launchpad and Central Management Console (versions 4.10, 4.20, 4.30). The issue allows an attacker to include invalid data in the HTTP response header sent to a web user, enabling cross-site scripting and page hijacking as stated in the public descript...

CVE-2018-2432: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence BI Launchpad and Central Management Console versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advanced attacks, including:...

CVE-2018-2431: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

PT-2018-15553

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Suite versions 4.10 through 4.20 SAP Crystal Reports version 2010 Description The issue allows an attacker to inject code that can be executed by the application, potentially controlling the...

PT-2018-15556

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence versions 4.10 through 4.30 Description The issue allows an attacker to include invalidated data in the HTTP response header sent to a Web user, potentially leading to advanced attacks such as cross-sit...

PT-2018-15555

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Suite versions 4.10 and 4.20 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. Recommendations For versions 4.10 and...

CVE-2018-2427: Improper Control of Generation of Code

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports version for Visual Studio .NET, Version 2010 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 25, 2018

I have never reverse engineered anything, but I did dismantle a Betamax VCR and put it back together without an instruction manual. My little brother liked to use the tape slot as a garage for his Hot Wheels® toy cars. We were usually able to take out the cars without any issues, but one day, he...

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

Introduction Through FireEye Dynamic Threat Intelligence DTI, we observed RIG Exploit Kit EK delivering a dropper that leverages the PROPagate injection technique to inject code that downloads and executes a Monero miner similar activity has been reported by Trend Micro. Apart from leveraging a...