38 matches found
Windows Zero-Day Emerges in Active Exploits
A just-patched vulnerability in the Windows operating system that was previously unknown up until last week is being actively exploited in the wild; it opens the door for full system takeover. Discovered by Vasily Berdnikov and Boris Larin of Kaspersky Lab on St. Patrick’s Day this year, the flaw...
Dräger Infinity Delta
1. EXECUTIVE SUMMARY CVSS v3 8.4 ATTENTION: Low skill level to exploit Vendor: Dräger Equipment: Infinity Delta Vulnerabilities: Improper Input Validation, Information Exposure Through Log Files, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities...
63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
It's Patch Tuesday once again…time for another round of security updates for the Windows operating system and other Microsoft products. This month Windows users and system administrators need to immediately take care of a total of 63 security vulnerabilities, of which 12 are rated critical, 49...
Adobe Releases Critical Security Updates for Acrobat, Reader and Photoshop CC
Adobe has just released new versions of its Acrobat DC, Reader and Photoshop CC for Windows and macOS users that patch 48 vulnerabilities in its software. A total of 47 vulnerabilities affect Adobe Acrobat and Reader applications, and one critical remote code execution flaw has been patched in...
8 New Spectre-Class Vulnerabilities (Spectre-NG) Found in Intel CPUs
A team of security researchers has reportedly discovered a total of eight new "Spectre-class" vulnerabilities in Intel CPUs, which also affect at least a small number of ARM processors and may impact AMD processor architecture as well. Dubbed Spectre-Next Generation, or Spectre-NG, the partial...
BSA-2017-338
Security Advisory ID : BSA-2017-338 Component : N/A Revision : 1.0: Final A ransomware calledWannaCryinfected computers in several countries. Computers that became infected had not been patched. Microsoft released a security bulletin on March 14th, 2017, titled Microsoft Security Bulletin MS17-01...
Windows-Exploit-Suggester v3.2 - Compares a targets patch levels against the Microsoft vulnerability database
This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the 'systeminfo' comman...
MS15-085: Vulnerability in Mount Manager Could Allow Elevation of Privilege (3082487)
The remote Windows host is affected by an elevation of privilege vulnerability in the Mount Manager component due to improper processing of symbolic links. A local attacker can exploit this vulnerability by inserting a malicious USB device into a user's system, allowing the writing of a malicious...
PHP for Windows vulnerable to OS command injection
Overview PHP for Windows contains an OS command injection due to a processing flaw in the escapeshellarg function. Masahiro Yamada reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Specifying a specially craft...
MS15-077: Vulnerability in ATM Font Driver Could Allow Elevation of Privilege (3077657)
The remote Windows host is affected by a privilege escalation vulnerability in the Adobe Type Manager Font Driver ATMFD due to a failure to properly handle objects in memory. A local attacker can exploit this by running a specially crafted application, resulting in arbitrary code execution with...
Details Surface on Stuxnet Patch Bypass
It took 10 hours to find what had eluded others for close to five years. German computer science student Michael Heerklotz spent the Christmas holiday reading Countdown to Zero Day, a narrative on the discovery and impact of Stuxnet, the computer worm considered one of the first cyberweapons, and...
CVE-2014-2613
Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to gain privileges via unknown vectors...
HP Power Manager Remote Code Execution
Added: 11/06/2009 CVE: CVE-2009-2685 BID: 36933 OSVDB: 59684 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A stack-based buffer overflow in the HP Power Manager management web server allows...
On the Twitter DDoS Attacks, Apple and Microsoft Patches
Threatpost editors Ryan Naraine and Dennis Fisher discuss the DDoS attacks against Twitter, Facebook and LiveJournal and delve into Apple’s Mac OS X patch and Microsoft’s Patch Tuesday plans. SHOW NOTES: UPDATE: Twitter Suffers DoS Attack Apple Warns of Mac Attack Risk via Image Files Microsoft...
MS06-025: Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280) (uncredentialed check)
The remote version of Windows contains a version of RRAS Routing and Remote Access Service that is affected by several memory corruption vulnerabilities. An attacker may exploit these flaws to execute code on the remote service. C Tenable Network Security, Inc. include"compat.inc"; if description...
Checks for MS HOTFIX for snmp buffer overruns
There is an Unchecked Buffer in SNMP Service and this checks to see if the Microsoft Patch has been applied only checks NT/Win2k and XP PRo. Impact of vulnerability: Run code of attacker's choice and denial of service attacks. Also may run snmp detect to see if snmp is running on this host. OpenV...
MS03-049: Buffer Overflow in the Workstation Service (828749)
The remote version of Windows contains a flaw in the function NetpValidateName in the WorkStation service that could allow an attacker to execute arbitrary code on the remote host with the SYSTEM privileges. A series of worms Welchia, Spybot, ... are known to exploit this vulnerability in the wil...
