657 matches found
Description of the security update for Excel 2016: April 9, 2019
None None...
Description of the security update for SharePoint Server 2010: April 9, 2019
Description of the security update for SharePoint Server 2010: April 9, 2019 Summary This security update resolves a cross-site–scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request that's made to an affected SharePoint...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019 Summary A remote code execution vulnerability exists when Windows incorrectly handles objects in memory. To learn more about the vulnerability, go to CVE-2019-0856. How ...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019 Summary A remote code execution vulnerability exists when the Windows Jet Database Engine incorrectly handles objects in memory. To learn more about the vulnerability, g...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019 Summary A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. To learn more about the vulnerability, go...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: April 9, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: April 9, 2019 Summary An information disclosure vulnerability exists when the Windows GDI component incorrectly discloses the contents of its memory. To learn more about the...
Slack: Slack DTLS uses a private key that is in the public domain, which may lead to SRTP stream hijack
Affects: Janus DTLS certificate Description The Janus server in use by Slack is configured using a certificate and private key that were previously distributed by default. This certificate is used to authenticate the DTLS connection which is later used to exchange keys for the SRTP stream. As a...
Description of the security update for SharePoint Foundation 2013: March 12, 2019
Description of the security update for SharePoint Foundation 2013: March 12, 2019 Summary This security update resolves a cross-site-scripting XSS vulnerability if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn mo...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An information disclosure vulnerability exists when the Windows kernel incorrectly handles objects in memory. To learn more about the vulnerability, go to...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory. To learn more about the vulnerability...
Description of the security update for Excel 2010: February 12, 2019
Description of the security update for Excel 2010: February 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists when Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the information disclosure vulnerability, see...
Description of the security update for Office 2016: February 12, 2019
None None...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary A remote code execution vulnerability exists when the Windows Jet Database Engine incorrectly handles objects in memory. To learn more about the vulnerabilit...
Description of the security update for vulnerabilities in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for vulnerabilities in Windows Embedded POSReady 2009: February 12, 2019 Summary This security update addresses the following vulnerabilities: An elevation of privilege vulnerability exists when Windows incorrectly handles calls to Win32k.sys. An elevation of...
Burp HMAC header extensions, a how-to
I was recently on a test where the client’s API used a custom authentication scheme to add a SHA256 HMAC dynamically on each request, based on the URL, time, and message body. My normal go-to for API testing is Postman especially when your client is lovely enough to give you definitions you can...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary An information disclosure vulnerability exists when Windows incorrectly discloses file information. To learn more about the vulnerability, see CVE-2019-0636...
[SECURITY] [DLA 1637-1] apt security update (amended)
Package : apt Version : 1.0.9.8.5 CVE ID : CVE-2019-3462 Debian Bug : amended to refer to jessie in the sources.list entry below, instead of stable Max Justicz discovered a vulnerability in APT, the high level package manager. The code handling HTTP redirects in the HTTP transport method doesnt...
[SECURITY] [DSA 4371-1] apt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4371-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 22, 2019 https://www.debian.org/security/faq -...
TAU Threat Intelligence Notification – WindTail (OSX)
Summary Dark Matter researcher Taha Karim recently presented his research on the APT group WindShift at Hack in the Box Singapore. This group primarily focuses on highly targeted campaigns directed toward Middle Eastern government and commercial entities. One of the custom macOS backdoors employe...
Hashie - Crack Hashes In A Blink Of An Eye
Hashie is a multi functional tool written in python to deal with hashes. Features Hash cracking. Hash generation. Automatic hash type identification. Supports MD5, SHA1, SHA256, SHA384, SHA512 etc... How to Install and Run in Linux 1 Enter the following command in the terminal to download it. git...