Masking Vulnerability Scan reports

Continuing the series of posts about Kenna "Analyzing Vulnerability Scan data", "Connectors and REST API" and similar services. Is it actually safe to send your vulnerability data to some external cloud service for analysis? Leakage of such information can potentially cause great damage to your...

Description of the security update for Outlook 2010: February 13, 2018

Description of the security update for Outlook 2010: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Notice of Change Announcement for NetScaler SD-WAN 1000-WS (Windows Server Edition), 4000-WO (WAN Optimization Edition) and 5000-WO (WAN Optimization Edition)

Citrix Systems, Inc. announces End of Maintenance for Citrix ADC NetScaler SD-WAN 1000-WS Windows Server Edition, 4000-WO WAN Optimization Edition and 5000-WO WAN Optimization Edition appliances. The tables below explain the Citrix NetScaler SD-WAN lifecycle management milestones as well as...

[SECURITY] Fedora 26 Update: rsync-3.1.3-2.fc26

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

CVE-2017-1233

IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912...

Design/Logic Flaw

IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912...

CVE-2017-1233: Incorrect Authorization

IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912...

PT-2018-5389

Name of the Vulnerable Software and Affected Versions: IBM Remote Control version 9 Description: The issue allows a local user to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. Recommendations: For IBM Remote Contro...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone_Os

launchd-portrep ================================================...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018 (KB4011607)

None None...

D-Link DSL-2640R - DNS Change

D-Link DSL-2640R - DNS Change D-Link DSL-2640R Unauthenticated Remote DNS Change Vulnerability Firmware Version: UK1.06 Hardware Version: B1 Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg/ Description: The vulnerability exist in the web interface...

Tracking changes in CERT bulletins and Nessus plugins using Vulners Time Machine

If you use Vulners.com vulnerability search engine, you probably know that it has a real "Time Machine". Each time Vulners sees some changes on a source page it creates a new version of security object. And you can see the full history of changes in a nice GUI: In most cases, the vendor just...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon Exploit

Exploit for Android platform in category dos / poc This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain and other core processes, including systemserver,...

Description of the security update for Office 2016: January 9, 2018 (KB4011622)

None None...

Description of the security update for SharePoint Server 2010 Office Web Apps: January 9, 2018

Description of the security update for SharePoint Server 2010 Office Web Apps: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...

Description of the security update for Office 2013: January 9, 2018

Description of the security update for Office 2013: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, go to the following Common...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018 (KB4011605)

None None...

Description of the security update for SharePoint Foundation 2010: January 9, 2018

Description of the security update for SharePoint Foundation 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...