Microsoft Windows Unquoted Service Path Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/exe' class MetasploitModule 'Windows Unquoted Service Path Privilege Escalation', 'Description' = %q This module exploits a logic flaw due to h...

ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

Windows Error Reporting settings option is unavailable after update 3000850 is installed in Windows Server 2012 R2

Windows Error Reporting settings option is unavailable after update 3000850 is installed in Windows Server 2012 R2 This article describes an issue that occurs after you install November 2014 update rollup 3000850 in Windows Server 2012 R2. You can fix this issue by using the update in this articl...

CVE-2020-2732

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest...

Code injection

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x Exynos chipsets software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 August 2018...

CVE-2018-21063

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x Exynos chipsets software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 August 2018...

CVE-2018-21063: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x Exynos chipsets software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 August 2018...

PT-2020-8707

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with M6.0 Samsung mobile devices with N7.x Samsung mobile devices with O8.x Description An issue was discovered on Samsung mobile devices due to an architectural problem in Keymaster. The problem arises because tlApi in...

On mobile device on-screen keyboard does not appear in ICA/HDX session automatically

On mobile device on-screen keyboard does not appear when user tap a field to edit in the application of desktop session. User need to manually select keyboard from desktop viewer...

ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

CVE-2019-6461

An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c...

ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

Apple Safari Logic Problem Vulnerability

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari suffers from a logic problem vulnerability. No details of the vulnerability are provided at this time...

PT-2025-20071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the net sched component. The issue arises from the cp-alloc hash not being updated after hash allocation in tcindex allo...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-1266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : qemu-kvm (EulerOS-SA-2020-1266)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In QEMU 3.0.0, tcpemu in slirp/tcpsubr.c has a heap-based buffer overflow.CVE-2019-6778 - A flaw was found in QEMU's...

$100K Paid Out for Google Cloud Shell Root Compromise

Google has awarded its inaugural annual top prize for the Google Cloud Platform GCP, for vulnerabilities found in the Google Cloud Shell. The find — a container escape that leads to host root access and the ability to use privileged containers — has earned $100,000 for Dutch researcher Wouter ter...

Secure Mail on iOS opens for about 5 seconds then crashes

When Secure Mail opens all looks ok, after about 5 seconds the app crashes. Just for one user regardless of iOS device...

SUSE-SU-2020:14291-1 Security update for openssl1

This update for openssl1 fixes the following issues: - Add missing commits fixing the security issue called 'The 9 Lives of Bleichenbacher's CAT'. bsc1117951 - Fix a memory problem in 'BNcopy'. bsc1160163...

PT-2020-22726

Name of the Vulnerable Software and Affected Versions openssl1 affected versions not specified Description The issue is related to a security problem known as 'The 9 Lives of Bleichenbacher's CAT'. Additionally, there is a memory problem in the BN copy function. Recommendations At the moment, the...