UBUNTU-CVE-2018-17780

Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...

DEBIAN-CVE-2018-17780

Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...

PT-2018-14191 · Telegram +1 · Telegram +2

Name of the Vulnerable Software and Affected Versions: Telegram Desktop aka tdesktop version 1.3.14 Telegram version 3.3.0.0 WP8.1 on Windows Description: The issue allows the leakage of end-user public and private IP addresses during a call due to an unsafe default behavior. This behavior involv...

Threat Roundup Sept 21 - 28

Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we’ve observed this week — covering the dates between Sept. 21 and 28. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, we will summarize the threats we’ve observed by...

Epee Levin Packet Deserialization Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the Levin deserialization functionality of the epee library. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability. Tested Versions Monero...

dr-michael-bohne.de XSS vulnerability

Open Bug Bounty ID: OBB-677031 Description| Value ---|--- Affected Website:| dr-michael-bohne.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

IDOR On ProConf Peer-Review And Conference Management 6.0 File Disclosure

Exploit Title: IDOR on ProConf Peer-Review and Conference Management System Date: 19/07/2018 Exploit Author: S. M. Zia Ur Rashid Author Contact: https://www.linkedin.com/in/ziaurrashid/ Vendor Homepage: http://proconf.org & http://myproconf.org Affected Version:...

Newsmaker Interview: Derek Manky on ‘Self-Organizing Botnet Swarms’

For over five years Derek Manky, global security strategist at Fortinet and FortiGuard Labs, has been helping the private and public sector identify and fight cybercrime. His job also includes working with noted groups: Computer Emergency Response, NATO NICP, INTERPOL Expert Working Group and the...

PT-2020-8616 · Unknown +1 · Bitcoin Core +2

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions 0.16.0 through 0.16.1 Bitcoin Knots versions 0.16.0 through 0.16.1 Description: The issue allows remote denial of service via a flood of multiple transaction inv messages with random hashes. This can also affect other...

Peer-to-Peer Crypto-Exchanges: A Haven for Money Laundering

The need to launder money is omnipresent in the criminal world, and lately, a new way of doing it has come to the fore: peer-to-peer cryptocurrency exchanges. These exchanges offer one-to-one relationships and transactions; buyers and sellers of virtual currency sign-up with their location...

Docker Server Version Scanner

This module attempts to identify the version of a Docker Server running on a host. If you wish to see all the information available, set VERBOSE to true. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Google Solves Update Issue for Android Apps Installed from Unknown Sources

If you are wondering how to receive latest updates for an Android app—installed via a 3rd party source or peer-to-peer app sharing—directly from Google Play Store. For security reasons, until now apps installed from third-party sources cannot be updated automatically over-the-air, as Google does...

Google Solves Update Issue for Android Apps Installed from Unknown Sources

If you are wondering how to receive latest updates for an Android app—installed via a 3rd party source or peer-to-peer app sharing—directly from Google Play Store. For security reasons, until now apps installed from third-party sources cannot be updated automatically over-the-air, as Google does...

RHEL 7 : glusterfs (RHSA-2018:1954)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1954 advisory. GlusterFS is a key building block of Red Hat Gluster Storage. It is based on a stackable user-space design and can deliver exceptional performance fo...

CVE-2018-0295

A vulnerability in the Border Gateway Protocol BGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update...

Important: Red Hat Security Advisory: glusterfs security update

An update for glusterfs is now available for Native Client for Red Hat Enterprise Linux 7 for Red Hat Storage and Red Hat Gluster Storage 3.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Microsoft Windows: Turn off Microsoft Peer-to-Peer Networking Services

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winp2pnetworksevices.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off Microsoft Peer-to-Peer Networking Services Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Service: Peer Name Resolution Protocol

The service SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.109264";...

Microsoft Windows: Service: Peer Networking Identity Manager

The service SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.109266";...

Microsoft Windows: Service: Peer Networking Grouping

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpeernetworkinggrouping.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Peer Networking Grouping p2psvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...