Lucene search
+L

1282 matches found

Krebs on Security
Krebs on Security
added 2018/07/16 7:09 p.m.102 views

‘LuminosityLink RAT’ Author Pleads Guilty

A 21-year-old Kentucky man has pleaded guilty to authoring and distributing a popular hacking tool called "LuminosityLink," a malware strain that security experts say was used by thousands of customers to gain unauthorized access to tens of thousands of computers across 78 countries worldwide. Th...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/07/13 12:00 a.m.2688 views

Security Updates for Microsoft Skype for Business and Microsoft Lync (July 2018)

The Microsoft Skype for Business or Microsoft Lync installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via...

9.3CVSS9.1AI score0.1662EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/07/12 12:00 a.m.9 views

Microsoft Lync and Skype for Business Remote Code Execution Vulnerability (CNVD-2018-15859)

Microsoft Lync and Skype for Business are both products of Microsoft Corporation, USA.Microsoft Lync formerly known as Microsoft Office Communicator is a new generation of integrated enterprise communication platform released.Skype for Business is a Skype for Business is an integrated enterprise...

8.8CVSS8.8AI score0.1662EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/12 12:00 a.m.10 views

Microsoft Lync and Skype for Business Security Bypass Vulnerability

Microsoft Lync 2013 SP1 and Skype for Business 2016 are both products of Microsoft Corporation.Microsoft Lync formerly known as Microsoft Office Communicator 2013 SP1 is a new generation of integrated communication platform for the enterprise. Skype for Business 2016 is a set of integrated...

9.3CVSS7.8AI score0.05456EPSS
SaveExploits0References1
NVD
NVD
added 2018/07/11 12:29 a.m.26 views

CVE-2018-8311

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync...

8.8CVSS8.9AI score0.1662EPSS
SaveExploits0References4
Prion
Prion
added 2018/07/11 12:29 a.m.29 views

Security feature bypass

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync...

9.3CVSS7.7AI score0.05456EPSS
SaveExploits0References2Affected Software2
NVD
NVD
added 2018/07/11 12:29 a.m.35 views

CVE-2018-8238

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync...

9.3CVSS7.6AI score0.05456EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/11 12:29 a.m.10 views

CVE-2018-8238

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync...

7.8CVSS5.8AI score0.05456EPSS
SaveExploits0References2
Prion
Prion
added 2018/07/11 12:29 a.m.25 views

Remote code execution

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync...

6.8CVSS8.8AI score0.1662EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2018/07/11 12:00 a.m.156 views

CVE-2018-8238

Summary of CVE-2018-8238 (Skype for Business/Lync Security Feature Bypass) : The issue arises when Skype for Business or Lync fail to properly parse UNC path links shared via messages, enabling a security feature bypass. An attacker could exploit this by persuading a logged-in user to click a cra...

9.3CVSS8.1AI score0.05456EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2018/07/11 12:00 a.m.37 views

CVE-2018-8238

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync...

7.9AI score0.05456EPSS
SaveExploits0References2
CVE
CVE
added 2018/07/11 12:00 a.m.106 views

CVE-2018-8311

CVE-2018-8311 is a remote code execution vulnerability in Skype for Business and Lync caused by improper sanitization of crafted content. The issue could allow code execution in the context of the logged-in user, via remote, user-initiated action (e.g., viewing crafted content or links). Affected...

8.8CVSS8.8AI score0.1662EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2018/07/11 12:00 a.m.35 views

CVE-2018-8311

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync...

8.9AI score0.1662EPSS
SaveExploits0References4
ThreatPost
ThreatPost
added 2018/07/10 7:50 p.m.102 views

Microsoft Fixes 17 Critical Bugs in July Patch Tuesday Release

UDPATE Browser vulnerabilities took center stage in Microsoft’s July Patch Tuesday security bulletin. In all, Microsoft patched 17 bugs rated critical, with ten tied to scripting engine flaws impacting Internet Explorer. In total, Microsoft is reporting 53 bugs: 17 critical, 34 rated important, o...

9.3CVSS1.1AI score0.37696EPSS
SaveExploits8References14
Microsoft KB
Microsoft KB
added 2018/07/10 7:00 a.m.50 views

Description of the security update for Skype for Business 2016: July 10, 2018

None None...

9.3CVSS7AI score0.1662EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/07/10 7:00 a.m.34 views

Remote Code Execution Vulnerability in Skype For Business and Lync

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attack...

8.8CVSS1.9AI score0.1662EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/07/10 7:00 a.m.46 views

Skype for Business and Lync Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages. An attacker who successfully exploited the vulnerability could execute arbitrary commands in the context of the logged-in user. The security feature bypass by...

9.3CVSS3.6AI score0.05456EPSS
SaveExploits0
Symantec
Symantec
added 2018/07/10 12:00 a.m.57 views

Microsoft Skype for Business and Lync CVE-2018-8238 Security Bypass Vulnerability

Description Microsoft Skype for Business and Lync are prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Lync 2013 32-bit SP1 Microsoft Lync 2013 64-bit SP1 Microso...

0.5AI score0.05456EPSS
SaveExploits0Affected Software2
Symantec
Symantec
added 2018/07/10 12:00 a.m.52 views

Microsoft Skype for Business and Lync CVE-2018-8311 Remote Code Execution Vulnerability

Description Microsoft Skype for Business and Lync are prone to a remote code-execution vulnerability. Successfully exploiting this issue may result in the execution of arbitrary code in the context of the current user. Failed exploit attempts will likely result in denial-of-service conditions...

2AI score0.1662EPSS
SaveExploits0References1Affected Software2
Kaspersky
Kaspersky
added 2018/07/10 12:00 a.m.136 views

KLA11287 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A tampering vulnerability in Microsoft Office...

9.3CVSS8.9AI score0.39438EPSS
SaveExploits0References29
Rows per page
Query Builder