CVE-2019-17066

In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...

Utah Says No to Apple/Google COVID-19 Tracing; Debuts Startup App

The state of Utah has settled on a contact-tracing mobile app that collects detailed user location information to track the spread of COVID-19 among citizens – eschewing the API model proposed by Apple and Google in April. The app is called “Healthy Together” and it was created by a startup calle...

SUSE-SU-2020:1171-1 Security update for nginx

This update for nginx fixes the following issues: nginx was updated to 1.16.1 jscECO-1401 - Added TLS 1.3 support jscSLE-9295, bsc1150711 - Replaced obsolete GeoIP module with MaxMinDB-based GeoIP2 jscSLE-11184, bsc1156202 - Started nginx after network is online bsc1155690 - CVE-2019-20372: Fixed...

CVE-2020-5876

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address...

Andrea ST Filters Service 1.0.64.7 Unquoted Service Path

Exploit Title: Andrea ST Filters Service 1.0.64.7 - 'Andrea ST Filters Service ' Unquoted Service Path Discovery by: Roberto Piña Discovery Date: 2020-04-28 Vendor Homepage: https://andreaelectronics.com/ Software Link : https://andreaelectronics.com/ Tested Version: 1.0.64.7 Vulnerability Type:...

February 26, 2018, update for Outlook 2010 (KB4018314)

February 26, 2018, update for Outlook 2010 KB4018314 This article describes update 4018314 for Microsoft Outlook 2010 that was released on February 26, 2018. This update has a prerequisite.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based...

"File contents" option is always selectable, Start screen becomes blank, or computer freezes when startup in Windows 8.1

"File contents" option is always selectable, Start screen becomes blank, or computer freezes when startup in Windows 8.1 This article describes an issue in which the File contents option is always selectable, Start screen becomes blank, or computer freezes during startup in Windows 8.1, Windows R...

Dark_Nexus Botnet Compromises Thousands of ASUS, D-Link Routers

A new botnet has compromised hundreds of ASUS, D-Link and Dasan Zhone routers over the past three months, as well as Internet of Things IoT devices like video recorders and thermal cameras. The botnet, called darknexus based on a string it prints in its banner, uses processes similar to previous...

CVE-2019-20619

An issue was discovered on Samsung mobile devices with P9.0 software. Secure Startup leaks keyboard suggested words. The Samsung ID is SVE-2019-13773 March 2019...

CVE-2019-20619

An issue was discovered on Samsung mobile devices with P9.0 software. Secure Startup leaks keyboard suggested words. The Samsung ID is SVE-2019-13773 March 2019...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 software. Secure Startup leaks keyboard suggested words. The Samsung ID is SVE-2019-13773 March 2019...

CVE-2019-20619

An issue was discovered on Samsung mobile devices with P9.0 software. Secure Startup leaks keyboard suggested words. The Samsung ID is SVE-2019-13773 March 2019...

Changing the Service startup timeout (ServicesPipeTimeout) in Windows

If a service doesn't start within a set amount of time, Windows will kill it and put an error in the System event log. You might decide that you need to extend the service startup timeout. Or, if your services are complaining about a startup timeout too quickly, you might decide you need to check...

Beers with Talos Ep. #74: Impacting civil society

Beers with Talos BWT Podcast episode No. 74 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded March 2, 2020 We open up the show with a sugary sweet poem before talking about RSA and our annual trip through...

ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection

A flaw was found in the way ksh evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables...

CVE-2019-19694

The Trend Micro Security 2019 15.0.0.1163 and below consumer family of products is vulnerable to a denial of service DoS attack in which a malicious actor could manipulate a key file at a certain time during the system startup process to disable the product's malware protection functions or the...

ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection

A flaw was found in the way ksh evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables...

CVE-2020-1872

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201C01E75R1P12T8, earlier than 9.1.0.252C185E2R1P9T8, earlier than 9.1.0.252C432E4R1P9T8, and earlier than 9.1.0.255C576E6R1P8T8 have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance...

ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection

A flaw was found in the way ksh evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables...

The vulnerability of the Startup Framework component of Netweaver Application Server Java, which allows a perpetrator to disclose protected information

The vulnerability of theStartupFramework component in the Netweaver Application Server Java web application lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...