Denial of Service Vulnerability in Micropoint Active Defense Personal Edition

Micropoint Active Defense System Personal Edition is a new-generation anti-virus product with completely independent intellectual property rights developed by Micropoint Baihui Beijing Information Security Technology Company Limited hereinafter referred to as Micropoint. A denial-of-service...

HDX Media Engine Crashes when Disconnecting or Logging off From a Session

The HDX media engine crashes when disconnecting or logging off from a session. Here is how to reproduce the issue: 1. Start a published desktop from a ThinClient dual screen. 2. Within the published Desktop, launch another desktop. 3. Put this desktop on the second screen. 4. Logoff or disconnect...

My Little FormBook

This blog post is authored by Warren Mercer and Paul Rascagneres. Summary Cisco Talos has been tracking a new campaign involving the FormBook malware since May 2018 that utilizes four different malicious documents in a single phishing email. FormBook is an inexpensive stealer available as "malwar...

Denial of Service Vulnerability in Micropoint Active Defense Personal Edition

Micropoint Active Defense System Personal Edition is a new-generation anti-virus product with completely independent intellectual property rights developed by Micropoint Baihui Beijing Information Security Technology Company Limited hereinafter referred to as Micropoint. A denial-of-service...

Pseudo-Shell Post-Exploitation Module

This module will run a Pseudo-Shell. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'readline' class MetasploitModule Msf::Post include Msf::Post::File include Msf::Post::Unix include Msf::Post::Linux::System...

Security Bulletin: Vulnerability found in IBM Sterling B2B Integrator (CVE-2014-6099)

Summary IBM Sterling B2B Integrator is affected by a security vulnerability in the Change Password screens which could result in a brute force attack. Vulnerability Details CVEID:CVE-2014-6099 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition allows for an attacker to attempt login reques...

About the security content of iOS 11.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Microsoft Windows: Prevent enabling lock screen slide show

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincplocklockscreenslideshow.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent enabling lock screen slide show Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows: MSS: Time (seconds) before the screen saver grace period expires

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlscreensavergraceperiod.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: ScreenSaverGracePeriod The time in seconds before the screen saver grace period expires 0 recommended Authors: Emanuel Moss Copyright:...

Microsoft Windows: Prevent enabling lock screen camera

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincplockscreencamera.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent enabling lock screen camera Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

June 12, 2018—KB4284835 (OS Build 17134.112)

None None...

Code Execution Vulnerabilities in Multiple Crestron Products

Crestron TSW-1060 and others are touch screen devices from Crestron Electronics, USA. A security vulnerability exists in multiple Crestron products. A remote attacker can exploit the vulnerability to execute code via an injection command...

CVE-2016-9065

The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake location bar without any user notification. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This...

Denial of Service Vulnerability in Filmfd.sys Processing Malformed Data in Fair Intelligence Antivirus Software

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. filmfd.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A security vulnerability exists in the filmfd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 V8.1.7.6865. An attacker can exploit this...

Denial of Service Vulnerability in Fair Smart Antivirus fildds.sys Handling Malformed Data

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. fildds.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A security vulnerability exists in the fildds.sys driver in Fair Intelligent Antivirus 8 V8.1.5.6109 V8.1.7.6865. An attacker can exploit...

BadMod v2.0 - Detect Website CMS, Website Scanner & Auto Exploiter

Auto exploiter & get all server sites & bing dorker. Version 2.0 Fixed colors bug Fixed permissions bug Added new option to scan single target Added new option to scan joomla & wordpress plugins Installation Install tool git clone https://github.com/MrSqar-Ye/BadMod.git Install php sudo apt-get...

CVE-2018-4239

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

CVE-2018-4239

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

CVE-2018-4238

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...