CVE-2018-12332: Incomplete Cleanup

Incomplete Cleanup vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset...

XSS Vulnerability in the Property Details Page of Hainan Creative Media's PC Website Building System

Hainan Creative Future Culture Media Co., Ltd. is engaged in brand one-stop service e-commerce advertising consulting services media enterprises. We design complete solutions for users and provide the best advertising support services. A storage-based cross-site scripting vulnerability exists in...

SQL Injection Vulnerability in Hainan Creative Media pc Website Building System

Hainan Creative Future Culture Media Co., Ltd. is engaged in brand one-stop service e-commerce advertising consulting services media enterprises. We design complete solutions for users and provide the best advertising support services. A SQL injection vulnerability exists in the pc website builde...

WinstarNssmMiner Monero mining malware crashes PC upon detection

By Waqas Another day, another Monero cryptocurrency mining malware hits unsuspected users worldwide This is a post from HackRead.com Read the original post: WinstarNssmMiner Monero mining malware crashes PC upon detection...

Intel NUC kits system firmware elevation of privilege vulnerability

Intel NUC kits are a mini desktop from Intel Corporation USA. A security vulnerability exists in the system firmware in Intel NUC kits, which arises from the program failing to perform input validation adequately. A local attacker could exploit the vulnerability to elevate privileges...

2345 Security Guard 3.7 - '2345NsProtect.sys' Denial of Service

Exploit Title: BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7 Date: 20180513 Exploit Author: anhkgg Vendor Homepage: http://safe.2345.cc/ Software Link: http://dl.2345.cc/2345pcsafe/2345pcsafev3.7.0.9345.exe Version: v3.7 REQUIRED Tested on: Windows X64 CVE : CVE-2018-...

Flexense DupScout 10.7 Cross Site Scripting

Description: URL: localhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense DupScout Version: from v10.0.18 to v10.7. Attack Type: Remote Impact: This attack allows an attacker...

CVE-2018-4832: Improper Input Validation

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...

PT-2018-16788

Name of the Vulnerable Software and Affected Versions PicturesPro Photo Cart versions 6 and 7 before Security-Patch-2018-B Description The issue allows remote attackers to access arbitrary customer accounts via a modified cookie. This is related to the files pc head.php, pc login.php, and pc logi...

[SECURITY] Fedora 28 Update: dolphin-emu-5.0-21.fc28

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

Fauxpersky Keylogger Malware Stealing Passwords from Windows PCs

By Waqas Cybercriminals are quite innovative, to be honest; they are always This is a post from HackRead.com Read the original post: Fauxpersky Keylogger Malware Stealing Passwords from Windows PCs...

Qualys Cloud Platform (VM, PC) 8.13 New Features

This new release of the Qualys Cloud Platform VM, PC, version 8.13, includes several new feature improvements across the apps such as the ability to test authentication records, as well as improvements to UDC’s and report options in Qualys Policy Compliance. Feature Highlights Qualys Cloud Platfo...

[SECURITY] Fedora 27 Update: dolphin-emu-5.0-21.fc27

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

[SECURITY] Fedora 26 Update: dolphin-emu-5.0-21.fc26

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

king-pc.co.il XSS vulnerability

Open Bug Bounty ID: OBB-582671 Description| Value ---|--- Affected Website:| king-pc.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CBM - Car Backdoor Maker

A hardware-backdoor for CAN bus - by @UnaPibaGeek & @holesec For the first time, a hardware backdoor tool is presented having several advanced features, such as: remote control via SMS commands, automated launch of attack payloads at a GPS location or when a specific car status is reached; and a...

Youku client update process suffers from arbitrary file download vulnerability

Youku PC client is a video player that supports both online and local use. An arbitrary file download vulnerability exists in the Youku PC client update process. The vulnerability is caused by the client update process using an insecure HTTP communication protocol to interact with the server, and...

Windows 10 'S Mode' Coming Soon — For Security and Performance

Microsoft has confirmed that the company is planning to convert Windows 10 S from a dedicated operating system to a special "S Mode" that will be available in all versions of Windows. Windows 10 S, a new operating system designed for simplicity, security, and speed, was released by Microsoft last...

Cortana Lets Hackers Infect Windows PC Even when it is Locked

By Waqas The voice commands enabled, multi-language Cortana virtual assistant is probably This is a post from HackRead.com Read the original post: Cortana Lets Hackers Infect Windows PC Even when it is Locked...

Keyboards Fail to Map in ICA Sessions From Non-Windows Receivers such as Mac, Linux and HTML5

After an in-place upgrade of Remote PC VDA's from version 5.6.400 to 7.6.300 keyboards would fail to map in ICA sessions from non-Windows Receivers such as Mac, Linux, and HTML5...