SysAnalyzer - Automated Malcode Analysis System

SysAnalyzer is an open-source application that was designed to give malcode analysts an automated tool to quickly collect, compare, and report on the actions a binary took while running on the system. A full installer for the application is available and can be downloaded here. The application...

Intel Easy Streaming Wizard Elevation of Privilege Vulnerability

Intel Easy Streaming Wizard is a set of streaming media delivery live configuration software from Intel USA. A privilege vulnerability exists in the installer in versions of Intel Easy Streaming Wizard prior to 2.1.0731, which stems from a failure to have the correct file permissions. A local...

CVE-2019-11166

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

Input validation

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11166

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11166

The CVE-2019-11166 issue affects Intel® Easy Streaming Wizard prior to version 2.1.0731. The root cause is improper file permissions in the installer, which could let an authenticated local user escalate privileges. Multiple sources (Intel advisory and vendor/press records) corroborate a local es...

WordPress Ocean Extra plugin input validation error vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ocean Extra is a plugin used to add extensions to the Ocean theme. An input validation error vulnerability exists in the...

Intel® Easy Streaming Wizard Advisory

Summary: A potential security vulnerability in the Intel® Easy Streaming Wizard may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11166 Description: Improper file permissions in the installer for...

PVS Imaging Wizard Fails With “ Failed to write disk” Message After It Finishes

Imaging Wizard fails with “ Failed to write disk” message after it finishes. The Imaging Wizard logs show: Failed to write disk \\.\PhysicalDrive1. Access is denied. 0x00000005...

Check Point Gaia Operating System Open Interfaces With Default Password (sk145612)

The remote host is running a version of Gaia Operating System that is vulnerable to attacks after a CPUSE clean install and before completing the First Time Wizard. This is due to the administrator password being reset during the CPUSE clean installation process without also resetting interface...

WordPress CP Contact Form with PayPal Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.CP Contact Form with PayPal is a Paypal payment form plugin used in it. A cross-site scripting vulnerability exists in the Publishing...

CVE-2019-14785

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

CVE-2019-14785

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

CVE-2019-2599

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Pagelet Wizard. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Pagelet Wizard. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2019-2599

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Pagelet Wizard. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2019-2599

CVE-2019-2599 concerns a vulnerability in Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PT PeopleTools component (subcomponent: Pagelet Wizard). Affected are versioned releases 8.55, 8.56 and 8.57. The issue allows a low-privileged attacker with network access via HTTP to pot...

Error: Cannot create BDM partition for device <device name> while using XenDesktop Setup Wizard

The XenDesktop Setup Wizard might fail when creating target VMs on VmWare environmentunder the following scenario: Same service account is used; which is able to create Vms in Citrix Studio via MCS but failing in PVS All permissions are provided as per article CTX214389 vSAN is encrypted The Vm i...

Unspecified Vulnerability in D-Link DIR-655 C (CNVD-2019-23329)

The D-Link DIR-655 C is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-655 C prior to version 3.02B05 BETA03. The vulnerability can be exploited by an attacker to reset the password to the default null value with the help of the 'setupwizard'...

CVE-2019-5220

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...