Design/Logic Flaw

A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...

CVE-2018-3669

A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...

Intel® Centrino® Wireless-N and Intel® Centrino® Advanced-N products Bluetooth Driver Advisory

Summary: A potential security vulnerability in ibtfltcoex.sys driver for Intel® Centrino® Wireless adapters may allow denial of service. Vulnerability Details: CVEID: CVE-2018-3669 Description: A STOP error BSoD in the ibtfltcoex.sys driver for Intel® Centrino® Wireless N and Intel® Centrino®...

August 30, 2018—KB4343893 (OS Build 16299.637)

None None...

Microctfs - Small CTF Challenges Running On Docker

Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge docker rm -f logchallenge && docker run -d -p 8000:80 --name...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...

Improvements and fixes - Windows 8.1 and Server 2012 R2

Improvements and fixes - Windows 8.1 and Server 2012 R2 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error 0xD1 when you run network monitorin...

July 10, 2018—KB4338830 (Monthly Rollup)

None None...

Improvements and fixes - Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1

Improvements and fixes - Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error...

Improvements and fixes for Windows Server 2008 Service Pack 2

Improvements and fixes for Windows Server 2008 Service Pack 2 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error 0xD1 when you run network...

July 16, 2018—KB4345420 (OS Build 16299.551)

None None...

July 16, 2018—KB4345419 (OS Build 15063.1209)

None None...

June 21, 2018—KB4284833 (OS Build 14393.2339)

None None...

Multi Manage the screensaver of the target computer

This module allows you to turn on or off the screensaver of the target computer and also lock the current session. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Manage the screensaver o...

Security Bulletin: Vulnerability in Apache Tomcat affects Rational Lifecycle Integration Adapter for HP ALM (CVE-2016-3092)

Summary Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component, and is supplied with specific versions of Rational Lifecycle Integration Adapter for HP ALM. By sending file upload requests, an attacker could exploit this vulnerability to...

Description of the security update for vulnerabilities in Windows Server 2008: June 12, 2018

Description of the security update for vulnerabilities in Windows Server 2008: June 12, 2018 Summary Multiple vulnerabilities exist within Windows Server 2008.To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures CVE. CVE-2018-1040 CVE-2018-8225...

Quest DR Series Disk Backup Software Command Injection Vulnerability

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Stop Replication" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Burpa - A Burp Suite Automation Tool

A Burp Suite Automation Tool With Slack Integration. Requirements burp-rest-api Burp Suite Professional slackclient Usage $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT...

A week in security (May 7 – May 13)

Last week on Labs, we looked at the case of a fake Android AV, an annoying adware that goes by the name of Kuik, the return of threat actors behind the Shopper Stop tech scam, a new Netflix phishing scam, the recent zero-day vulnerability in Internet Explorer, and the insufficiency of merely...

Tech support scam uses fake Shoppers Stop site to lure thousands

Update 2018-05-17: Shoppers Stop is a legitimate company based out of India and their brand was abused by scammers. These days, there are a lot of browser locker campaigns fueled by malvertising or redirection from hacked sites. But the Shoppers Stop tech scam campaign is actually a bit of both,...