PT-2018-12119

Name of the Vulnerable Software and Affected Versions GlobalSuperGameToken affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for GlobalSuperGameToken, an Ethereum token. This overflow allows the owner of...

Integer overflow

The mintToken function of a smart contract implementation for Plaza Token PLAZA, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-11571

Name of the Vulnerable Software and Affected Versions EncryptedToken ECC affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for EncryptedToken ECC, an Ethereum token. This overflow allows the owner of the...

Microsoft Windows: Screen saver timeout

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintimoutscreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Screen saver timeout users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Turn off toast notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintoastlockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Turn off toast notifications on the lock screen users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Basic authentication (RM Service)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmservbasicauth.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow Basic authentication Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows 10: Configure Windows spotlight on lock screen

This policy setting lets you configure Windows spotlight on the lock screen. If you enable this policy setting, SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows 10: Cortana above lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincortanalockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Cortana above lock screen Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: Prevent the computer from joining a homegroup

This policy setting specifies whether users can add computers to a homegroup. By default, users can add their computer to a homegroup on a private network. If you enable this policy setting, users cannot add computers to a homegroup. This policy setting does not affect other network sharing...

Microsoft Windows: Plug and Play device redirection (Remote Desktop Services)

This policy setting lets you control the redirection of supported Plug and Play and RemoteFX USB devices, such as Windows Portable Devices, to the remote computer in a Remote Desktop Services session. By default, Remote Desktop Services does not allow redirection of supported Plug and Play and...

Microsoft Windows: Allow indexing of encrypted files

This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing will attempt to decrypt and index the content access restrictions will still apply. If you disable this policy setting, the search service components including non-Microsoft components are expect...

Microsoft Windows: Configure Watson events

This policy setting allows you to configure whether or not Watson events are sent. If you enable or do not configure this setting, Watson events will be sent. If you disable this setting, Watson events will not be sent. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some...

PYSEC-2018-80

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

Microsoft Windows: BitLocker-protected removable drives recovery

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmbitlockerrecovery.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected removable drives can be recovered Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows 10: Do not show feedback notifications

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winfeedbacknotifications.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Do not show feedback notifications Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: BitLocker-protected operating system drives recovery (password)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winosbitlockerpassword.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected operating system drives can be recovered: Recovery password Authors: Emanuel Moss Copyright: Copyright c 2018...

Microsoft Windows 10: Download Mode

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windownloadmode.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Download Mode Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Microsoft Windows: BitLocker-protected removable drives recovery (password)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmbitlockerrecoverypassword.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected removable drives can be recovered: Recovery password Authors: Emanuel Moss Copyright: Copyright c 2018...

Microsoft Windows: Require additional authentication at startup (TPM startup PIN)

This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with or without a Trusted Platform Module TPM. This policy setting is applied when you turn on BitLocker. Note: Only one of the...

Microsoft Windows: Authenticated Proxy usage (Connected User Experience and Telemetry)

This policy setting blocks the Connected User Experience and Telemetry service from automatically using an authenticated proxy to send data back to Microsoft on Windows 10. If you disable or do not configure this policy setting, the Connected User Experience and Telemetry service will automatical...