684 matches found
Simple IOC and Incident Response Scanner: Loki
LOKI is a free and simple IOC scanner, a complete rewrite of main analysis modules of our full featured APT Scanner THOR. IOC stands for „Indicators of Compromise“. These indicators can be derived from published incident reports, forensic analyses or malware sample collections in your Lab. LOKI...
Description of the security update for the Windows Hyper-V denial of service vulnerability in Windows Server 2008: March 13, 2018
Description of the security update for the Windows Hyper-V denial of service vulnerability in Windows Server 2008: March 13, 2018 Summary A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a...
Description of the security update for the CredSSP remote code execution vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: March 13, 2018
None None...
Description of the security update for the Microsoft Video Control elevation of privilege vulnerability in WES09 and POSReady 2009: March 13, 2018
None None...
Description of the security update for the Windows Wireless WPA pairwise encryption key reinstallation vulnerability in WES09 and POSReady 2009: March 13, 2018
None None...
Threat Analysis: ROKRAT Malware
ROKRAT also referred to as DOGcall is a family of malware that has been used by attackers originating from North Korea. The family continues to evolve and adopt techniques from other families also used by the same attack group. The ROKRAT core payload is typically deployed by a loader, which has...
Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018
Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018 Summary Vulnerabilities exist in the way that the Windows Kernel handles objects in memory. To learn more about the vulnerabilities, go to the following...
Description of the security update for the Windows Common Log file system driver elevation of privilege vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the Windows Common Log file system driver elevation of privilege vulnerability in Windows Server 2008: February 13, 2018 Summary An elevation of privilege vulnerability exist when the Windows Common Log File System CLFS driver improperly handles objects in...
Description of the security update for the Windows Kernel vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the Windows Kernel vulnerability in Windows Server 2008: February 13, 2018 Summary An information disclosure vulnerability and an elevation of privilege vulnerability exist when the Windows kernel improperly handles objects in memory. To learn more about the...
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018 Summary A remote code execution vulnerability exists in StructuredQuery when the software fails to properly handle objects in memory. To learn more about the...
Description of the security update for the Windows scripting engine vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018
Description of the security update for the Windows scripting engine vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018 Summary An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attack...
Description of the security update for the Windows remote code execution vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018
Description of the security update for the Windows remote code execution vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018 Summary A remote code execution vulnerability exists when Windows improperly handles objects in memory. To learn more about the vulnerability,...
Description of the security update for WES09 and POSReady 2009: February 13, 2018
None None...
Description of the security update for SQL Server 2014 SP2 CU10: January 16, 2018
None None...
Description of the security update for the Windows GDI information disclosure vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the Windows GDI information disclosure vulnerability in Windows Server 2008: January 3, 2018 Summary A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfull...
Description of the security update for the ATMFD.dll information disclosure vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the ATMFD.dll information disclosure vulnerability in Windows Server 2008: January 3, 2018 Summary An information disclosure vulnerability exists in Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who...
Description of the security update for the elevation of privilege vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the elevation of privilege vulnerability in Windows Server 2008: January 3, 2018 Summary An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploits the vulnerability could...
Description of the security update for SQL Server 2012 SP3 GDR: January 16, 2018
None None...
Description of the security update for the Windows information disclosure vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
None None...
Description of the security update for the information disclosure vulnerability in Windows Server 2008: December 12, 2017
Description of the security update for the information disclosure vulnerability in Windows Server 2008: December 12, 2017 Summary An information disclosure vulnerability exists when the Windows its:// protocol handler unnecessarily sends traffic to a remote site to determine the zone of a provide...