988 matches found
Multiple Microsoft Products Permission License and Access Control Issues Vulnerabilities
Microsoft Forefront Endpoint Protection is a set of endpoint security software. Microsoft Security Essentials is a set of free antivirus software that comes with Windows. Microsoft Windows Defender is a set of antivirus software that comes with Windows. The vulnerability exists in a number of...
Nation-State APTs Target U.S. Utilities With Dangerous Malware
Researchers believe that nation-state actors are behind several spearphishing campaigns targeting U.S. utility companies with a newly-identified malware, which has the capabilities to view system data and reboot machines. Lure emails were sent to three U.S. utilities companies between July 19 and...
SUSE-SU-2019:1776-1 Security update for zeromq
This update for zeromq fixes the following issues: - CVE-2019-13132: An unauthenticated remote attacker could have exploited a stack overflow vulnerability on a server that is supposed to be protected by encryption and authentication to potentially gain a remote code execution. bsc1140255 -...
SUSE SLED15 / SLES15 Security Update : dbus-1 (SUSE-SU-2019:1521-1)
This update for dbus-1 fixes the following issues : Security issue fixed : CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. Fixes in spec file : - fix warning and error messages. - fix licensing directory...
SUSE-SU-2019:1521-1 Security update for dbus-1
This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. - Fixes in spec file: fix warning and error messages. fix licensing directory...
Multiple Schneider Electric Products Privilege License and Access Control Issues Vulnerabilities
The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...
ZOHO ManageEngine ServiceDesk Plus Permission License and Access Control Issues Vulnerability
ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A vulnerability exis...
Malspam Campaigns Distribute HawkEye Keylogger, Post Ownership Change
The HawkEye malware kit and information-stealer has been spotted in a newfound slew of campaigns after a recent ownership change. While the keylogger has been in continuous development since 2013, in December a thread on a hacking site noted an ownership change, after which posts on hacking forum...
Google Android Privilege Permission and Access Control Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in System in Google Android versions 8.0, 8.1, and 9, which stems from a lack of effective permissions licensing and access control measures in a networked system ...
Goog Android elevation of privilege vulnerability (CNVD-2020-35897)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android suffers from an elevation of privilege vulnerability that stems from a lack of effective privilege licensing and access control measures in a networked system or product. There...
Mimikatz v2.2.0 - A Post-Exploitation Tool to Extract Plaintexts Passwords, Hash, PIN Code from Memory
mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. But that's not all!...
The vulnerability of the Capability Licensing Service, related to lack of access control, allows a violator to increase their privileges.
The vulnerability of the Capability Licensing Service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...
OPENSUSE-SU-2019:0325-1 Security update for freerdp
This update for freerdp to version 2.0.0rc4 fixes the following issues: Security issues fixed: - CVE-2018-0886: Fix a remote code execution vulnerability CredSSP bsc1085416, bsc1087240, bsc1104918 - CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication...
Google Will Prompt European Android Users to Select Preferred Default Browser
Google announced some major changes for its Android mobile operating system in October after the European Commission hit the company with a record $5 billion antitrust fine for pre-installing its own apps and services on third-party Android phones. The European Commission accused Google of forcin...
Intel Capability Licensing Service Elevation of Privilege Vulnerability
Intel Capability Licensing Service is an Intel Capability Licensing Service interface from Intel Corporation. A security vulnerability exists in Intel Capability Licensing Service versions prior to 1.50.638.1, which arises from the program's failure to enforce adequate access controls. A local...
Improper access control
Insufficient access control in IntelR Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access...
CVE-2018-12200
Insufficient access control in IntelR Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access...
CVE-2018-12200
Insufficient access control in IntelR Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access...
CVE-2018-12200
CVE-2018-12200 affects Intel Capability Licensing Service with insufficient access control in versions before 1.50.638.1, enabling an unprivileged user to escalate privileges via local access. Connected sources (Intel/Lenovo/HP advisories) corroborate a family of related Intel components (CSME, S...
