Important: Red Hat Security Advisory: Red Hat Satellite Tools security update

An update is now available for Satellite Tools 6.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

RHEL 5 / 6 / 7 / 8 : Red Hat Satellite Tools (RHSA-2019:1223)

The remote Redhat Enterprise Linux 5 / 6 / 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1223 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and...

Privilege Escalation

Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs provisioning and configuration management of predefined standard operating...

Man-In-The-Middle (MitM)

Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs provisioning and configuration management of predefined standard operating...

SolarWinds DameWare Mini Remote Client Agent < 12.0.3 Stack Buffer Overflow

The remote host is running a version of SolarWinds DameWare Mini Remote Client Agent prior to 12.0.3. A stack-based buffer overflow condition exists in DWRCS.EXE due to improper validation of user supplied data passed to wsprintfw. An attacker can exploit this, via a specially crafted message, to...

Critical RCE Bug in Cisco WebEx Browser Extensions Faces 'Ongoing Exploitation'

A critical vulnerability in Cisco WebEx browser extensions that could allow unauthenticated remote code-execution RCE on targeted machines is being actively exploited in the wild. The news comes just days after Cisco issued a flurry of 24 different patches for its IOS XE operating system and warn...

CVE-2019-1674

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters...

CVE-2019-1674

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters...

Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters...

DCOMrade - Powershell Script For Enumerating Vulnerable DCOM Applications

DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc. The script is build to work with Powershell 2.0 but will work with all versions above as well. The script currently...

Netbiter WS100 Cross-Site Scripting Vulnerability

Netbiter WS100 is a remote management solution for industrial controls e.g. emergency generators. A cross-site scripting vulnerability exists in Netbiter WS100. An attacker can exploit the vulnerability to inject arbitrary web script or HTML...

Apple macOS Sierra Remote Management Privilege Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Remote Management is one of the remote management components. A security vulnerability exists in the Remote Management component of Apple macOS Sierra version 10.12.6. The vulnerability can be exploited...

HMS Netbiter WS100 3.30.5 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2018-042 Product: Netbiter WS100 Manufacturer: HMS Industrial Networks AB Affected Versions: 3.30.5 = Tested Versions: 3.30.5 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Low Solution Status: Fixed Manufacturer...

CVE-2018-4298

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation...

CVE-2018-4298

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation...

CVE-2018-4298

CVE-2018-4298 maps to a permissions issue in Remote Management on macOS High Sierra (before 10.13.3) and related Security Updates. A remote user could gain root privileges due to insufficient permission validation, with the issue addressed by improved permission checks in the Remote Management co...

CVE-2018-4298

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation...

CVE-2018-4298: Undefined Security Weakness

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation...

PT-2019-10847

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.3 Security Update 2018-001 Sierra affected versions not specified Security Update 2018-001 El Capitan affected versions not specified Description A permissions issue existed in Remote Management due to...

CVE-2018-20577

Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewallSPI.exe, cgi-bin/setupremotemgmt.exe, cgi-bin/setuppass.exe, and cgi-bin/upgradep.exe CSRF. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T...