CVE-2019-0124

CVE-2019-0124 affects Intel 6th Gen Core processors (and related families) with TXT support, due to insufficient memory protection that could let a local privileged user escalate privileges. Connected sources (Intel INTEL-SA-00220; Red Hat/CVE entries; CNVD/CVE catalogs) confirm the issue and the...

CVE-2019-0151

CVE-2019-0151 describes insufficient memory protection in Intel TXT for certain Intel Core and Xeon processors, potentially enabling privilege escalation via local access. The Intel INTEL-SA-00240 advisory (and related IBM/Lenovo advisories) confirm affected platforms and advise applying firmware...

CVE-2019-0184: Undefined Security Weakness

Insufficient access control in protected memory subsystem for IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5 and v6 Families; IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT may...

CVE-2019-0151: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient memory protection in IntelR TXT for certain IntelR Core Processors and IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0124: Undefined Security Weakness

Insufficient memory protection in IntelR 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0152: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient memory protection in System Management Mode SMM and IntelR TXT for certain IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2019-4001

Name of the Vulnerable Software and Affected Versions Intel Xeon Processors affected versions not specified Description The issue is related to insufficient memory protection in System Management Mode SMM and Intel Trusted Execution Technology TXT for certain Intel Xeon Processors. This may allow...

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...

PT-2019-4434

Name of the Vulnerable Software and Affected Versions IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families IntelR XeonR Processor E3-1500 v5 and v6 Families IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT Description The...

2019.2 IPU – Intel® SGX and TXT Advisory

Summary: Potential security vulnerabilities in Intel® Software Guard Extensions SGX and Intel® Trusted Execution Technology TXT may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0123...

HPSBHF03638 rev. 4 - Intel 2019.2 IPU BIOS Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for BIOS, Voltage...

mpDNS - Multi-Purpose DNS Server

Simple, configurable "clone & run" DNS Server with multiple useful features Should work on Python 2 and 3 names.db - holds all custom records see examples Simple wildcards like .example.com Catch unicode dns requests Custom actions aka macro: shellexec::dig google.com +short - Execute shell comma...

DarkScrape - OSINT Tool For Scraping Dark Websites

OSINT Tool to find Media Links in Tor Sites. Tested On Kali Linux 2019.2 Ubuntu 18.04 Nethunter Arc Linux Installation git clone https://github.com/itsmehacker/DarkScrape.git pip3 install -r requirements.txt Features Download Media Scrape From Single Url Scraping From Files Txt Csv Excel Inspired...

Chainlink: No Valid SPF Records.

Hiii, There is any issue No valid SPF Records Desciprition : There is a email spoofing vulnerability.Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used in phishing...

Findomain - A Cross-Platform Tool That Use Certificate Transparency Logs To Find Subdomains

A cross-platform tool that use Certificates Transparency logs to find subdomains. We currently support Linux, Windows and MacOS. How it works? It tool doesn't use the common methods for subdomains discover, the tool uses Certificate Transparency logs to find subdomains and it method make it tool...

Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform

A cybersecurity professional today demonstrated a long-known unpatched weakness in Microsoft's Azure cloud service by exploiting it to take control over Windows Live Tiles, one of the key features Microsoft built into Windows 8 operating system. Introduced in Windows 8, the Live tiles feature was...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

CVE-2018-20604

Lei Feng TV CMS aka LFCMS 3.8.6 allows Directory Traversal via crafted use of .. in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/web........1.txt.html URI to read the 1.txt file...

PT-2018-14879

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue allows remote attackers to list .txt files via a direct request for the "/data/0/admin.txt" API endpoint. Recommendations For LAOBANCMS version 2.0, consider restricting access to the /data/0/admin.tx...

s-cms code execution vulnerability

s-cms is a content management system CMS based on PHP and MySQL. A security vulnerability exists in the file management for website security in s-cms version 3.0. The vulnerability can be exploited by remote attackers to generate robots.php files with the help of the 'txt' parameter of the...