CVE-2018-8398: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows...

CVE-2018-8400: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8401,...

CVE-2018-8406: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from...

PT-2018-1504

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows 10 Servers versions prior to the fixed version Windows 10 versions prior to the fixed version Description A remote code execution issue exists due to the Windows Shell not properly...

PT-2018-1488

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A security feature bypass issue exists, allowing an attacker to inject malicious code into a Windows PowerShell session. This is related to an improperly implemented security check...

PT-2018-18561

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description An elevation of privilege issue exists due to the failure of ndis.sys to check...

PT-2018-1496

Name of the Vulnerable Software and Affected Versions Windows 10 Servers Windows 10 Description The issue is related to the Win32k component's failure to properly handle objects in memory, which can lead to an elevation of privilege. This can potentially allow an attacker to execute arbitrary cod...

PT-2018-1479

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description The issue is caused by a buffer overflow in the Win32k component of Windows operating systems...

PT-2018-1462

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description The issue is related to errors in handling embedded fonts ...

PT-2018-1490

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server 2016 Windows 10 Windows 10 Servers Description The issue is related to errors in data processing in the Windows kernel, which can be exploited by an attacker to elevate their...

PT-2018-1474

Name of the Vulnerable Software and Affected Versions Windows 10 Servers, Windows 10 affected versions not specified Description A remote code execution issue exists due to improper handling of objects in memory by the Microsoft Windows PDF Library. This can be exploited by a remote attacker usin...

Information Disclosure

libcurl.so is vulnerable to information disclosure. HTTP headers are sent to both proxy and destination servers. This can lead to confidential information such as basic authorization headers containing user credentials being exposed to remote proxy servers...

Security Bulletin: Multiple Vulnerabilities in IBM Runtime Environments Java Technology Edition, Versions 6, 7, & 8 Affect Transformation Extender

Summary There are multiple vulnerabilities in IBM® Runtime Environments Java™ Technology Edition versions 6, 7, & 8 that are used by Transformation Extender. This issue was disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10356 DESCRIPTION: An...

Exploit for CVE-2005-2006

This is an open-source application server attack toolkit called clusterd. It automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack. The toolkit currently supports six different application server platforms, including JBoss, ColdFusion, and WebLogic...

Threat Identity...The First Line of Defense

Last quarter, we discussed zero trust and identity in regard to remote application access. This focus was primarily looking at enterprise users seeking to gain access to applications on a network where there are no boundaries: The internet. In the concept of zero trust, the internet is considered...

Phishing Campaign Steals Money From Industrial Companies

Industrial production companies are the targets in a large-scale spear-phishing email campaign aimed at installing legitimate remote administration software on victims’ systems. Researchers with Kaspersky Lab said that emails purporting to be commercial offers were the conduit to enabling attacke...

Code injection

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

High CPU Utilization on PVS 7.6 Servers

PVS 7.6: High CPU Utilization...

Samsung SmartThings Hub hubCore Port 39500 HTTP Header Injection Vulnerability(CVE-2018-3911)

Summary An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub. The hubCore process listens on port 39500 and relays any unauthenticated message to SmartThings' remote servers, which insecurely handle JSON messages, leading to partially controll...

Samsung SmartThings Hub video-core Database shard.videoHostURL Code Execution Vulnerability(CVE-2018-3906)

Summary An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on th...