4642 matches found
October 10, 2017—KB4041679 (Security-only update)
None None...
October 10, 2017—KB4041678 (Security-only update)
None None...
The Critical Security Controls: Basic Cybersecurity Hygiene for your Organization
It’s a well-known fact that most successful cyber attacks are easily preventable. That’s because the majority are neither highly sophisticated nor carefully customized. Instead, they are of the “spray and pray” sort. They try to exploit known vulnerabilities for which patches are available, or to...
Microsoft SharePoint Enterprise Server 2016 Remote Code Execution Vulnerability (KB4011217)
This host is missing an important security update according to Microsoft KB4011217 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft SharePoint Server 2013 Service Pack 1 WAS RCE Vulnerability (KB4011068)
This host is missing an important security update according to Microsoft KB4011068 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Internet Explorer help
None None...
Cisco IOS Software DHCP Remote Code Execution Vulnerability
According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...
Tails 3.2 - Live System to Preserve Your Privacy and Anonymity
Tails is a live system that aims to preserve your privacy and anonymity. It helps you to use the Internet anonymously and circumvent censorship almost anywhere you go and on any computer but leaving no trace unless you ask it to explicitly. It is a complete operating system designed to be used fr...
PowerShdll - Run PowerShell with rundll32 (Bypass software restrictions)
Run PowerShell with dlls only. Does not require access to powershell.exe as it uses powershell automation dlls. dll mode: Usage: rundll32 PowerShdll,main rundll32 PowerShdll,main -f Run the script passed as argument rundll32 PowerShdll,main -w Start an interactive console in a new window rundll32...
FLIR Systems Cameras Multiple Vulnerabilities
FLIR Systems FLIR Thermal/Infrared Camera FC-Series S, FC-Series ID, PT-Series are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Veeam ONE installation fails with "Couldn't create crypto provider" message
Challenge Veeam ONE installation fails with "Couldn't create crypto provider" message. Cause One of the known issues with Microsoft update 3000850 as per this MS KB article is the following: Opening Credential Manager fails with error 0x80090345", that also affects creating the crypto provider...
Git: Command injection
Background Git is a small and fast distributed version control system designed to handle small and large projects. Description Specially crafted ‘ssh://...’ URLs may allow the owner of the repository to execute arbitrary commands on client’s machine if those commands are already installed on the...
Description of the Security and Quality Rollup for the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 for Windows Server 2012: September 12, 2017
Description of the Security and Quality Rollup for the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 for Windows Server 2012: September 12, 2017 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework that could allow remote...
September 12, 2017—KB4038781 (OS Build 10240.17609)
None None...
September 12, 2017—KB4039111
None None...
CVE-2017-12225
A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixation Vulnerability. The vulnerability is due to the reuse of a preauthentication session token as pa...
Cross site scripting
A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...
Default Password '5SaP9I26' for 'remotessh' Account
The account 'remotessh' on the remote host has the default password '5SaP9I26'. A remote attacker can exploit this issue to gain administrative access to the affected system. TRUSTED...