Notice of Change Announcement for NetScaler SD-WAN 1000-WS (Windows Server Edition), 4000-WO (WAN Optimization Edition) and 5000-WO (WAN Optimization Edition)

Citrix Systems, Inc. announces End of Maintenance for Citrix ADC NetScaler SD-WAN 1000-WS Windows Server Edition, 4000-WO WAN Optimization Edition and 5000-WO WAN Optimization Edition appliances. The tables below explain the Citrix NetScaler SD-WAN lifecycle management milestones as well as...

[SECURITY] Fedora 26 Update: rsync-3.1.3-2.fc26

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

CVE-2017-1233

IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912...

Design/Logic Flaw

IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912...

Trojanizer - Trojanize Your Payload (WinRAR [SFX] Automatization)

The Trojanizer tool uses WinRAR SFX to compress the two files input by user, and transforms it into an SFX executable.exe archive. The sfx archive when executed it will run both files our payload and the legit appl at the same time. To make the archive less suspicious to target at execution time,...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018

None None...

D-Link DSL-2640R - DNS Change

D-Link DSL-2640R - DNS Change D-Link DSL-2640R Unauthenticated Remote DNS Change Vulnerability Firmware Version: UK1.06 Hardware Version: B1 Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg/ Description: The vulnerability exist in the web interface...

Tracking changes in CERT bulletins and Nessus plugins using Vulners Time Machine

If you use Vulners.com vulnerability search engine, you probably know that it has a real "Time Machine". Each time Vulners sees some changes on a source page it creates a new version of security object. And you can see the full history of changes in a nice GUI: In most cases, the vendor just...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain and other core processes, including systemserver,...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon Exploit

Exploit for Android platform in category dos / poc This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain...

Description of the security update for SharePoint Server 2010 Office Web Apps: January 9, 2018

Description of the security update for SharePoint Server 2010 Office Web Apps: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...

Description of the security update for SharePoint Foundation 2010: January 9, 2018

Description of the security update for SharePoint Foundation 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Description of the security update for Office 2016: January 9, 2018

None None...

Description of the security update for Office 2013: January 9, 2018

Description of the security update for Office 2013: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, go to the following Common...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018

None None...

CVE-2017-18018

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...

UBUNTU-CVE-2017-18018

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...

DEBIAN-CVE-2017-18018

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...

ALPINE-CVE-2017-18018

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...