(Pwn2Own) Microsoft Windows DirectX Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DirectX...

Microsoft Windows: Microsoft network server: Digitally sign communications (if client agrees)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnssigncommunicationpossible.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Digitally sign communications if client agrees Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Interactive logon: Message text for users attempting to log on

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmessageusersattemptlogon.nasl 11098 2018-08-23 14:32:47Z emoss $ Check value for Interactive logon: Message text for users attempting to log on Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Interactive logon: Prompt user to change password before expiration

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilpromptchangepassword.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Prompt user to change password before expiration Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks Gmb...

Microsoft Windows: Microsoft network client: Digitally sign communications (if server agrees)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncdigitallysigncommunicationsserveragrees.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network client: Digitally sign communications if server agrees Authors: Emanuel Moss Copyright: Copyright c 201...

Adobe Patches Zero-Day Flash Flaw

Adobe has released an emergency update to address a critical security hole in its Flash Player browser plugin that is being actively exploited to deploy malicious software. If you've got Flash installed -- and if you're using Google Chrome or a recent version of Microsoft Windows you do -- it's...

Microsoft Windows VBScript Class_Terminate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows VBScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 28, 2018

I ended up at an urgent care clinic earlier this week and found out I have strep throat. The doctor who examined me asked me what medicine I had taken prior to my visit to help alleviate my throat pain, to which I replied, “I took a multi-symptom liquid medicine because the pain was keeping me...

Microsoft Windows: Digitally sign secure channel data (when possible)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windomainsignsecurechannel.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Domain member: Digitally sign secure channel data when possible Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Require strong session key

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windomainrequirestrongsessionkey.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Domain member: Require strong session key Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Interactive logon: Machine inactivity limit

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmachineinactivitylimit.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Machine inactivity limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Digitally encrypt or sign secure channel data (always)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windomainrequiresignseal.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Domain member: Digitally encrypt or sign secure channel data always Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Microsoft Windows: Digitally encrypt secure channel data (when possible)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windomainsealsecurechannel.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Domain member: Digitally encrypt secure channel data when possible Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks Gmb...

Microsoft Windows: Shut down system immediately if unable to log security audits

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winauditshutdownunablelog.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Audit: Shut down system immediately if unable to log security audits Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

ManageEngine ADAudit Plus Detection (HTTP)

HTTP based detection of ManageEngine ADAudit Plus. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

(0Day) Microsoft Windows JScript Error Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Windows Defender Firewall: Public Profile: Apply local connection security rules

The policy determines whether the local connection rules are merged with GP settings when connected to a public network. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2018-6674

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges by default it runs with...

CVE-2018-6674

The CVE-2018-6674 issue affects McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13, specifically the McTray.exe component. The root cause is privilege escalation through the ability to spawn unrelated processes with elevated privileges when McTray.exe is granted elevated privileges by the sy...

CVE-2018-6664

CVE-2018-6664 affects McAfee Data Loss Prevention (DLP) Endpoint: the DLP Agent prior to 10.0.500 or 11.x prior to 11.0.400 allows an authenticated user to bypass the product block via a command-line utility. Impact is a master bypass of protection, with no details on exploitation in the wild pro...