Spearphishing Attack Spoofs Microsoft.com to Target 200M Office 365 Users

A spearphishing attack is spoofing Microsoft.com to target 200 million Microsoft Office 365 users in a number of key vertical markets, including financial services, healthcare, manufacturing and utility providers. Researchers at Ironscales discovered the campaign targeting several thousand...

Making Sense of the Security Sensor Landscape

We have a serious sensor problem in the cybersecurity world. And it’s bad. Particularly when it comes to network intrusion detection and prevention sensors IDS/IPS. It seems like many security operations center SOC teams have completely given up on them being effective. But is the problem with...

Intel Processor Identification Utility Privilege Escalation

The vulnerability of the Intel Processor Identification Utility is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-6317

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or...

Intel PROSet/Wireless WiFi security configuration error

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Oracle Solaris Utility Data Access

The vulnerability of the Utility component in Oracle Solaris systems is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the SSH network protocol...

Intel PROSet/Wireless WiFi Network DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

envoy:xds_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed Report: https://oss-fuzz.com/testcase?key=5657946447675392 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: xdsfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffadaa18a80 Crash State: Envoy::TestUtility::findCounter...

SUSE-SU-2020:3351-1 Security update for raptor

This update for raptor fixes the following issues: - Fixed a heap overflow vulnerability bsc1178593, CVE-2017-18926. - Update raptor to version 2.0.15 Made several fixes to Turtle / N-Triples family of parsers and serializers Added utility functions for re-entrant sorting of objects and sequences...

CVE-2020-12350

Improper access control in the IntelR XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12335

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12335

The vulnerability CVE-2020-12335 affects Intel® Processor Identification Utility before version 6.4.0603. The issue is described as improper permissions in the installer that may allow an authenticated local user to escalate privileges. This is supported by the Intel advisory (INTEL-SA-00419), wh...

CVE-2020-12335

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12335: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-4920

Name of the Vulnerable Software and Affected Versions: IntelR Processor Identification Utility versions prior to 6.4.0603 Description: The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local acces...

Intel® Processor Identification Utility Advisory

Summary: A potential security vulnerability in the Intel® Processor Identification Utility may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-12335 Description: Improper permissions in the install...

CDFMarker On Demand - For XenApp and XenDesktop

Created: March 2010 Modified: October 2010 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Description CDFMarker is...

Receiver Clean-Up Utility

Important Notes Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools --- Receiver cleanup utility is not required while upgrading to the Receiver forWindows 4.4 or newer. Receiver for Window...

MessageHistory

MessageHistory Version 3.0 Created Date: 08/20/2006 Updated Date: 09/25/2013 Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools Description Sometimes Citrix Technical Support needs to...

SsOnExpert - Single Sign-On (SSON) Receiver/Plug-in Troubleshooting Tool

Created Date: 04/15/2010 Description The SsOnExpert tool is a command-line based application that automates the process of checking common causes of Single Sign On issues in XenApp environments. The tool can be used to verify configuration settings both from the console and remotely. Depending on...