3198 matches found
Tapplock Bluetooth Low Energy Subsystem Access Control Error Vulnerability
Tapplock is a smart lock.Bluetooth Low Energy BLE subsystem is one of the low power Bluetooth subsystems. An access control error vulnerability exists in the BLE subsystem in versions of Tapplock prior to 2018-06-12, which can be exploited by an attacker to perform a replay attack...
Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019
Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019 Summary This update for Windows Server 2012 and Windows Embedded 8 Standard includes the quality improvements from KB4503263 released June 11, 2019, in addition to these key changes: Addresses an issue that may display...
CVE-2018-14885
creationtimestamp| type| source ---|---|--- 2019-06-28 22:29:32+00:00| seen| https://t.me/cibsecurity/5218...
Azure File Sync Agent v6.3 Release – June 2019 (KB4489739)
Update for Azure File Sync agent version 6.3.0.0. For more details, see the associated Microsoft Knowledge Base article...
Threat Roundup for June 14 to June 21
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 14 and June 21. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
CVE-2019-0959
creationtimestamp| type| source ---|---|--- 2019-06-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47028 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen|...
Netflix Dial Reference Denial of Service Vulnerability
Netflix Dial Reference is a Dial Discovery and Launch protocol implementation from Netflix, Inc. in the United States. A security vulnerability exists in versions of Netflix Dial Reference prior to 2019-6-18. An attacker could exploit the vulnerability to cause a denial of service...
CVE-2019-10028
Denial of Service DOS in Dial Reference Source Code Used before June 18th, 2019...
CVE-2019-10028
Denial of Service DOS in Dial Reference Source Code Used before June 18th, 2019...
Update for Windows Server 2008 SP2: June 20, 2019
Update for Windows Server 2008 SP2: June 20, 2019 Summary This update for Windows Server 2008 SP2 includes the quality improvements from KB4503287 released June 11, 2019, in addition to these key changes: Addresses an issue that may display the error, “MMC has detected an error in a snap-in and...
Security Update for Microsoft Office (June 2019) (macOS)
The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by remote code execution vulnerabilities in the Microsoft Word software due to improper handling of objects in memory. An unauthenticated, remote attacker can...
Compatibility update for installing Windows 10, version 1607: June 18, 2019
None None...
Azure File Sync Agent v7.0 Release – June 2019 (KB4490495)
Update for Azure File Sync agent version 7.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v7.0 Release – June 2019 (KB4490495)
Update for Azure File Sync agent version 7.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v7.0 Release – June 2019 (KB4490495)
Update for Azure File Sync agent version 7.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
AROX School-ERP Pro Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "AROX School-ERP Pro Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a command execution vulnerability in AROX...
Security Bulletin: IBM API Connect is affected by sensitive information leakage in LoopBack (CVE-2019-4382)
Summary API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4382 DESCRIPTION: IBM API Connect could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. CVSS Base Score: 5.3 CVSS Temporal...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I'm speaking on "Securing a World of Physically Capable Computers" at Oxford University on Monday, June 17, 2019. The list is maintained on this page...