My Little FormBook

This blog post is authored by Warren Mercer and Paul Rascagneres. Summary Cisco Talos has been tracking a new campaign involving the FormBook malware since May 2018 that utilizes four different malicious documents in a single phishing email. FormBook is an inexpensive stealer available as "malwar...

CVE-2018-9968

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-9968

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-9968

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fedora 26 : ckeditor (2018-1361f39801)

4.9.2 https://ckeditor.com/cke4/release/CKEditor-4.9.2 Security Updates - Fixed XSS vulnerability in the Enhanced Image image2 plugin reported by Kyaw Min Thein. - Issue summary: It was possible to execute XSS inside CKEditor using the tag and specially crafted HTML. Please note that the default...

Foxit Reader TextBox Keystroke Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in TextBox Keystroke handling, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of validation before performing an operati...

Apple iOS and macOS High Sierra WindowServer Security Bypass Vulnerability

Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS High Sierra is a specialized operating system for Mac computers. windowServer is one of the Window WindowServer is one of the Window service components. A security...

Foxit Reader TextBox Keystroke Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Intel Remote Keyboard Elevation of Privilege Vulnerability

Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. A local attacker could exploit the vulnerability to inject keystrokes int...

Intel Remote Keyboard elevation of privilege vulnerability (CNVD-2018-08319)

Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. An attacker can exploit the vulnerability to inject keystrokes as a local...

CVE-2018-3645

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...

Session fixation

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...

Privilege escalation

Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user...

CVE-2018-3641

Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user...

CVE-2018-3645

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...

CVE-2018-3645

CVE-2018-3645 affects all versions of the Intel Remote Keyboard. A local attacker can escalate privileges to inject keystrokes into another remote keyboard session, via the Intel Remote Keyboard app. The issue is described as a local escalation of privilege with impact to authentication/authoriza...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...