860 matches found
How to configure Applock device Policy on IOS
How to configure Applock device Policy on IOS...
Read all Windows Policy Security Settings - Windows
Read all Windows Advanced Policy Security Settings Windows. Note: This script saves into DB only and does not report any output. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Maple Maplet File Creation and Command Execution
A command execution vulnerability exists in Maplesoft Maple. The vulnerability is due to insufficient security settings in the application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code in the context of the application...
mongoaudit - A Powerful MongoDB Auditing and Pentesting Tool
mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing with pip This is the recommended installation method in case you have python and pip . pip install mongoaudit Alternative installer Use this if and only...
KLA10964 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10960. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...
HP Printers Wi-Fi - Improper Access Control
0x01 vulnerability overview 1. Vulnerability information 2017 2 2 June, the foreign site seclists. org reported a HP printer WiFi direct connection of the unauthorized access vulnerability, through our follow-up, found that the unauthorized access vulnerability also affects the same type have the...
Design/Logic Flaw
Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...
CVE-2014-8362
Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...
CVE-2014-8362
Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...
CVE-2014-8362
The CVE-2014-8362 entry affects Vivint Sky Control Panel 1.1.1.9926 and describes a vulnerability where remote attackers can enable/disable the alarm system and modify other security settings through the Web-enabled interface. The connected documents corroborate a web-accessible vulnerability wit...
CVE-2014-8362
Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...
A cumulative update is available for Team Foundation Server 2010 Service Pack 1
A cumulative update is available for Team Foundation Server 2010 Service Pack 1 Introduction A cumulative update CU is available for Microsoft Team Foundation Server TFS 2010 Service Pack 1 SP1. This CU resolves the issues that are described in the following Microsoft Knowledge Base KB article:...
Some Workspace Environment Management security settings are not getting applied
Some WEM-related security settings such as hiding the Run menu or blocking access to system drives are not being applied, and the Agent log throws errors such as these: Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Attempted to perform an unauthorized operation...
The vulnerability of the Internet Explorer browser, which allows a hacker to bypass the sandboxing protection mechanism
The vulnerability of the Internet Explorer browser is related to incorrect security settings and zone parameters. Exploiting this vulnerability allows a malicious actor to bypass the sandbox protection mechanisms by using a specially crafted website...
The router is now a new vulnerability: hackers remotely hijacked Internet access-vulnerability warning-the black bar safety net
Recently, security experts found Inteno home router, there may be a security vulnerability. The vulnerability will lead to hackers can remote home router remotely hijacked and monitoring, and the router's firmware to transform into hack the homemade version, which completely take over the home...
Microsoft Office Macros Configuration
Nessus was able to collect Office macro configuration information for active accounts on the remote Windows host and generate a report as a CSV attachment. C Tenable Network Security, Inc. include"compat.inc"; if !definedfunc"nasllevel" || nasllevel 5200 exit0, "Not Nessus 5.2+"; if description...
Microsoft Windows Authenticated User Code Execution
This module uses a valid administrator username and password or password hash to execute an arbitrary payload. This module is similar to the "psexec" utility provided by SysInternals. This module is now able to clean up after itself. The service created by this tool uses a randomly chosen name an...
Downloading Pokémon GO Game for Android? Beware! It Could be Malicious...
"Pokémon Go" has become the hottest iPhone and Android game to hit the market in forever with enormous popularity and massive social impact. The app has taken the world by storm since its launch this week. Nintendo's new location-based augmented reality game allows players to catch Pokémon in the...
The vulnerability of the Firefox browser, which allows a malicious individual to execute cross-site scripting attacks
The Mozilla Firefox browser contains a vulnerability that can be exploited if the security settings are not properly configured to block pop-up windows. This allows malicious individuals to bypass the protection mechanisms for cross-site scripting scenarios...
The vulnerability of the Flash Player software platform, which allows a violator to bypass the ASLR protection mechanism
The vulnerability of the Flash Player software is related to errors in security settings. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using JIT data...