Denial Of Service (DoS)

Linux kernel is vulnerable to NULL pointer dereference vulnerability. This occurs in the Key Management sub component in Linux kernel when trying to issue a KEYTCLREAD on a negative key. Local attackers could cause a denial of service conditions via a crafted KEYCTLREAD operation...

hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)

Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA STore Address and STD STore Data sub-operations. These sub-operations allow the processor to hand-off address generation...

Pivotal Software Spring Data JPA Information Disclosure Vulnerability

Pivotal Software Spring Data JPA is the United States Pivotal Software, Inc. set of applications used to simplify and create JPA-based data access layer development. An information disclosure vulnerability exists in Pivotal Software Spring Data JPA. The vulnerability stems from errors such as...

EulerOS Virtualization 2.5.3 : openssh (EulerOS-SA-2019-1355)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or...

Rockwell Automation Micrologix 1400 <= 21.2 Fault Bits Exploit

Binary data 720224.prm...

Mitsubishi QJ71E71-100 Communications Adapter Detection

Binary data 752153.prm...

Rockwell Automation Micrologix 1400 <= 21.2 Master Password Request Exploit

Binary data 720225.prm...

Rockwell Automation Micrologix 1400 <= 21.2 Exploitable Access Control

Binary data 720215.prm...

Toshiba VFS15S-2004PL-W1 ASD Drive Detection

Binary data 757971.prm...

Toshiba VFS15S-2002PL-W1 ASD Drive Detection

Binary data 757970.prm...

ABB 1SVR427030R2000 CP-E 48 0.62 Power Supply Detection

Binary data 756477.prm...

Information Disclosure

Linux kernel is vulnerable to information disclosure. The vulnerability exists because of incorrect error handling in the setmempolicy and mbind compat syscalls in 'mm/mempolicy.c' in the Linux kernel. Local users could obtain sensitive information from uninitialized stack data by triggering...

Information Disclosure

kernel-rt is vulnerable to information disclosure. The vulnerability exists as the cryptoreportone function in crypto/cryptouser.c users an incorrect length value during a copy operation...

Wipro Attackers Have Operated Under the Radar for Years

New details are emerging in the April attack on systems consulting behemoth Wipro, which saw its network hacked and used for mounting attacks on a dozen of its customers. In a fresh analysis of the indicators of compromise IOCs, Flashpoint analysts said that the cyberattackers have actually been...

APT trends report Q1 2019

For just under two years, the Global Research and Analysis Team GReAT at Kaspersky Lab has been publishing quarterly summaries of advanced persistent threat APT activity. The summaries are based on our threat intelligence research and provide a representative snapshot of what we have published an...

SQL Injection Vulnerability in the Operation and Management Side of Housing Sentinel Real Estate System

Housing Sentinel Real Estate System has multiple systems for new homes, used homes, rentals, neighborhoods, Q&A and more. A SQL injection vulnerability exists in the operation and management side of the Housing Sentinel Real Estate System. Attackers can use this vulnerability to obtain sensitive...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Cross-site scripting in the additional processing of Customize Item function CWE-79 - CVE-2019-5928 Cross-site scripting in the application "Memo" CWE-79 - CVE-2019-5929 Browse restriction bypass in th...

JVN#58849431: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Cross-site scripting in the additional processing of Customize Item function CWE-79 - CVE-2019-5928 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS...

April 25, 2019—KB4498375 (OS Build 10240.18187)

None None...

Operation ShadowHammer: a high-profile supply chain attack

In late March 2019, we briefly highlighted our research on ShadowHammer attacks, a sophisticated supply chain attack involving ASUS Live Update Utility, which was featured in a Kim Zetter article on Motherboard. The topic was also one of the research announcements made at the SAS conference, whic...