CVE-2018-8205

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10,...

CVE-2018-8211

CVE-2018-8211 describes a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session. Affected products listed in the sources include Windows 10 and Windows 10 Server variants. The vulnerability is characterized as a b...

CVE-2018-8175

CVE-2018-8175 describes a denial-of-service in Windows WebDAV Minirdr when querying a WebDAV directory. The vulnerability can be triggered by a user visiting a attacker-controlled site or link, leading to the victim’s system stopping to respond. Affected products include Windows 10 and Windows Se...

CVE-2018-8239

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8210

Technical details such as affected product versions, root cause, exploitability, and patch guidance are not provided in the connected documents; monitor for updates.

CVE-2018-8211

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is uniqu...

CVE-2018-8140

CVE-2018-8140 (Cortana Elevation of Privilege) affects Windows 10 and Windows Server (server 1709/1803) where Cortana retrieves data from user input services without considering status, enabling local privilege escalation. Root cause: Cortana’s data handling allows execution of commands with elev...

CVE-2018-8215

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8231

A remote code execution vulnerability exists when HTTP Protocol Stack Http.sys improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

Shopify: Subdomain Takeover - https://competition.shopify.com/

Dear Shopify Security Team, The Shopify.com subdomain competition.shopify.com was vulnerable to a subdomain takeover as it was pointing to an unclaimed Heroku service through the CNAME competition.shopify.com.herokudns.com, while the custom domain 'competition.shopify.com' was unclaimed in Heroku...

Microsoft Windows: Microsoft network client: Send unencrypted password to third-party SMB servers

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncunencryptedpasswordsmb.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network client: Send unencrypted password to third-party SMB servers Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Prowli Malware Targeting Servers, Routers, and IoT Devices

After the discovery of massive VPNFilter malware botnet, security researchers have now uncovered another giant botnet that has already compromised more than 40,000 servers, modems and internet-connected devices belonging to a wide number of organizations across the world. Dubbed Operation Prowli ...

Multiple Huawei Server Authentication Bypass Vulnerabilities

Huawei 1288H V5 and others are different models of server equipment from Huawei, China. An authentication bypass vulnerability exists in several Huawei servers, which stems from an imperfect authentication mechanism. A remote attacker can exploit this vulnerability to bypass authentication and ga...

CVE-2018-7943

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level...

CVE-2018-7943

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level...

CVE-2018-7943

CVE-2018-7943 describes an authentication bypass in certain Huawei servers. Huawei’s advisory HWPSIRT-2018-02048 confirms a vulnerability where a remote attacker with low privileges can bypass authentication through specific operations, potentially exposing sensitive information and elevating pri...

H2O HTTP Server < 2.2.5 Heap Overflow Vulnerability

H2O HTTP Server is prone to a heap buffer overflow while trying to emit access log. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-16007

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption JOSE for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key...

75% of the 'Left to Get Hacked' Redis Servers Found Infected

Despite the continual emergence of new cyber attacks because of misconfigured servers and applications, people continue to ignore security warnings. A massive malware campaign designed to target open Redis servers, about which researchers warned almost two months ago, has now grown and already...

75% of the 'Left to Get Hacked' Redis Servers Found Infected

Despite the continual emergence of new cyber attacks because of misconfigured servers and applications, people continue to ignore security warnings. A massive malware campaign designed to target open Redis servers, about which researchers warned almost two months ago, has now grown and already...