Tor Linux Sandbox Breakout Via X11

Tor: Linux sandbox breakout via X11 From inside the Linux sandbox described in https://blog.torproject.org/blog/tor-browser-70-released, it is still possible to talk to the X server without any restrictions. This means that a compromised browser can e.g. use the XTEST X protocol extension at...

macOS Fruitfly Backdoor Analysis Renders New Spying Capabilities

LAS VEGAS—The FruitFly backdoor became a known entity in January, but it’s a good bet that for years it had been in the wild, undetected by analysts and security software. The macOS and OS X malware has a number of insidious spying capabilities that would make anyone uneasy, and a variant recentl...

SmoothCriminal: Sandbox Detection Via Cursor Speeds!

PenTestIT RSS Feed It's that exciting time of the year folks when new people from the security walks of life throng to casinos in the desert. Yes! I am talking about Black Hat, BSidesLV, DefCon. Bringing to you a part of utility that will be completely released at BSidesLV - SmoothCriminal, which...

June 13, 2017—KB4022717 (Security-only update)

None None...

June 13, 2017—KB4022726 (Monthly Rollup)

None None...

Microsoft Windows Multiple Vulnerabilities (KB4022717)

This host is missing a critical security update according to Microsoft KB4022717 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4022726)

This host is missing a critical security update according to Microsoft KB4022726 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges...

CVE-2015-4596

Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges...

CVE-2015-4596

Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges...

CVE-2015-4596

The CVE-2015-4596 issue affects Lenovo Mouse Suite prior to version 6.73. A local user can escalate privileges to Administrator, with the ability to run arbitrary code. The root cause is not explicitly detailed in the supplied documents, but multiple sources confirm the impact and version-bound n...

PT-2017-6769 · Lenovo · Lenovo Mouse Suite

Name of the Vulnerable Software and Affected Versions: Lenovo Mouse Suite versions prior to 6.73 Description: The issue allows local users to run arbitrary code with administrator privileges. Recommendations: For versions prior to 6.73, update to version 6.73 or later to resolve the issue...

CVE-2015-4596: Undefined Security Weakness

Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges...

HP ERK-321A Wireless Mouse Spoofing Vulnerability

The HP ERK-321A is a wireless desktop device consisting of a mouse and keyboard. A spoofing vulnerability exists in the HP ERK-321A Wireless Mouse, which can be exploited by an attacker to launch a mouse spoofing attack due to unencrypted and unauthenticated mouse data communication...

Microsoft Windows Multiple Vulnerabilities (KB4016871)

This host is missing a critical security update according to Microsoft Security update KB4016871. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Design/Logic Flaw

GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator...

CVE-2017-8376

GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator...

CVE-2017-8376: Improper Neutralization of Input During Web Page Generation

GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator...

PT-2017-18300

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.0.2 Description The issue is triggered by an authenticated comment that is mishandled during a mouse operation by an administrator, leading to XSS. Recommendations For GeniXCMS version 1.0.2, update to a newer version that...

Robert W. Taylor, Who Helped Create the Internet, Dies at 85

--- Image by New York Times The Internet just lost one of its most prominent innovators. Robert W Taylor, a computer scientist who was instrumental in creating the Internet as well as the modern personal computer, has died at the age of 85. Mr. Taylor, who is best known as the mastermind of ARPAn...