Poll bug : Add 5 questions, submit, delete 1 question, can't add another reached max question limit.
By
+warwagon,
in Site & Forum Issues
-
Recently Browsing 0 members
- No registered users viewing this page.
-
Similar Content
-
By Usama Jawad96
Valve patches Steam exploit that allowed inflation of wallet funds
by Usama Jawad
Although the Epic Games Store hands out freebies on a frequent basis, Valve's Steam is still the platform of choice for most of the PC gaming community due to multiple reasons including the fact that it's more mature, it regularly offers deep sales, and that it has a massive library on offer. As such, it's particularly interesting to know that Steam actually had a bug which allowed people to add unlimited funds to their wallets.
The exploit was reported by "drbrix" on HackerOne on August 9. While you can dive deep into the details here, the gist of the matter is that if you had an email ID containing certain strings like "amount100", you could intercept the POST request to your Smart2Pay payment method and artificially inflate its value to receive more funds than what you actually paid for. Essentially, you could make a payment of $1 for Steam wallet funds but change the parameters of the POST request to receive a greater amount instead.
Valve accepted the report on August 10, issued it a "critical" severity rating, and applied a fix. The report indicates that while it is still possible to modify the parameter value in the POST request, this does not impact the amount you receive in return anymore.
The issue has been made public by Valve now that a fix has been applied on its production server. The person who initially informed Valve of the exploit has also been awarded a bounty of $7,500 because their report was "clearly written and helpful in identifying a real business risk". The email substring is important because it was being modified to inflate funds. For example, if your email had the substring "brixamount100", it could be changed to "brix&amount=100" in the POST request to receive more funds. It's currently unclear if the bug was being actively exploited.
Source: HackerOne via Eurogamer
-
By hellowalkman
Google thinks bug hunting could get easier thanks to its new unified platform
by Sayan Sen
Google has launched today its new dedicated website for bug hunters which can be accessed via the following URL: bughunters.google.com. The new website unifies all the Vulnerability Rewards Program (VRPs), which comprises Google, Android, Chrome, Google Play, as well as Abuse, and should make submitting newfound bug reports and such easier. The platform has been launched to celebrate the 10-year anniversary of the VRP launch although the celebration appears to be a bit late.
Other improvements that Google notes are detailed below:
Google says that when it launched its bug-hunting program back in 2010, the company received 25 reports far exceeding the expectations, and after 10 years, here's how it stands:
Total bugs rewarded: 11,055
Number of rewarded researchers: 2,022
Total rewards: $29,357,516
You may find more information on the official blog post here.
-
By hellowalkman
Windows July update breaks printing and scanning when using smart-cards
by Sayan Sen
Microsoft seems to be having to deal with issues related to printers for a while now. This year alone, starting with the March update that caused the blue screen of death (BSOD) when trying to print, and more recently with the PrintNightmare print spooler service vulnerability. And Microsoft's troubles aren't stopping there.
Today, the firm has confirmed that its recent July security update version KB5004237, which was released on July 13, is causing problems when printing on certain systems when trying to utilize smart cards for user authentication. This time, alongside printing problems, scanning on such systems may also not work.
According to the Redmond firm, the KB5004237 July 13 cumulative update fixed printing problems on such printers that were connected via USB. However, it seems the update has also introduced a new bug as a result of the changes made for dealing with the CVE-2021-33764 vulnerability. This is causing the new issue on Domain Controller servers which act as gatekeepers responsible for dealing with such authentication requests.
It has been noted however that while working with smart cards may fail, username and password authentication should work without issue. Here's how Microsoft has described the problem:
The problem has been detailed a bit more under KB5005408 which explains that client printers and scanners must be compliant with either of the following:
Here, KDC refers to a Key Distribution Center.
The Windows platforms affected by this issue are:
Client: Windows 10, version 21H1; Windows 10, version 20H2; Windows 10, version 2004; Windows 10, version 1909; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607; Windows 10 Enterprise 2015 LTSB; Windows 8.1; Windows 7 SP1
Server: Windows Server, version 20H2; Windows Server, version 2004; Windows Server, version 1909; Windows Server, version 1809; Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 SP1; Windows Server 2008 SP2
Microsoft has said that it's investigating the issue and will provide a temporary workaround. For people having problems, the company has asked to update the necessary drivers and firmware and to consult with the device manufacturers when needed. You may find more details about the problem here on the company's official page.
-
By Abhay V
Microsoft's patch for PrintNightmare vulnerability can be bypassed completely [Update]
by Abhay Venkatesh
Microsoft began rolling out a mandatory security patch for most supported Windows versions yesterday to fix the PrintNightmare vulnerability – a critical issue present in the Windows Print Spooler service tracked under CVE-2021-34527 that when exploited could allow for both remote code execution (RCE) and local privilege escalation (LPE). While yesterday’s update fixed the RCE exploit, the changelog did not mention any fixes for the LPE component.
Now, security researchers have begun reporting that the patch released yesterday can be bypassed, as it does not fix the problem with the Point and Print policy in Windows – which the firm initially said was not directly related –, which can still be used to perform RCE and LPE. Researchers and experts tweeted proof of concepts (spotted by BleepingComputer) running on fully patched systems, showing off how the patch could be completely bypassed to perform LPE. This was corroborated by another researcher from CERT, Will Dormann.
Considering that the zero-day vulnerability and its possible exploits have been widely shared in the wild, systems that have the Print Spooler service running might be at active risk of being compromised, especially those in enterprise setups that use the functions to remotely install printer drivers and updates. For now, though, the original workarounds of disabling the Print Spooler service or blocking inbound remote printing through Group Policy might be the best option to mitigate potential threats. While the changes do impact printing functionality, it is a faster fix and negates the need for admins to provision ineffective patches for their organization’s systems.
You can follow these steps to disable the Print Spooler service through PowerShell:
Open PowerShell as Administrator Stop-Service -Name Spooler -Force Set-Service -Name Spooler -StartupType Disabled Alternatively, you can inbound remote printing through Group Policy via group policy using the following steps:
Open the Group Policy Editor Head to Computer Configuration / Administrative Templates / Printers Disable the “Allow Print Spooler to accept client connections:” policy Currently, there is no word from Microsoft about the researchers’ findings, but it will not be surprising to know that the firm is already working on a patch for addressing the issues. It might help to also keep an eye out for updates on the MSRC page tracking the vulnerability.
Update: Microsoft has updated the MSRC listing noting that it is rolling out patches for Windows Server 2012, Windows Server 2016, and Windows 10, Version 1607. The firm adds that in order to secure the system, users "must confirm that the following registry settings are set to 0 or are not defined".
Interestingly, CERT researcher Dormann claims that the "NoWarningNoElevationOnInstall = 0 does NOT prevent exploitation". The firm is yet to address the reports from other security research firms as well.
-
By Abhay V
Microsoft releases mandatory Windows updates to fix PrintNightmare exploit [Update]
by Abhay Venkatesh
Earlier last week, Microsoft acknowledged that it was investigating a critical vulnerability in Windows 10 that when exploited could let attackers run arbitrary code on the victim’s system. The vulnerability, tracked under CVE-2021-34527, is present in the Windows Print Spooler service and is termed print "PrintNightmare" that can allow for remote code execution (RCE). As the vulnerability was still being investigated, the Redmond firm listed two possible workarounds to mitigate the risks caused by the bug.
Today, the firm has provided an update in the Microsoft Security Response Center (MSRC) listing for the vulnerability noting that it is rolling out a patch for the latest Windows 10 versions to address the issue. The update, KB5004945, is currently rolling out to the three most recent Windows 10 versions, 2004, 20H2, and 21H1, bumping them to Windows 10 builds 19041.1083, 19042.1083, and 19043.1083, respectively. Since these versions are based on the same codebase, the updates are identical for all the versions. The changelog and documentation for the update are yet to go live.
Considering that these are security updates to fix a critical vulnerability, they are mandatory updates and are downloaded automatically through Windows Update. Users can also manually download the patch from the Update Catalog here. Future patches, such as the upcoming Patch Tuesday updates, will contain these fixes.
There is no word from the firm on how the vulnerability affects older versions of the OS, though it notes that it has completed the investigation of the issue. The updates today are only rolling out to the three most recent and fully supported Windows 10 versions, but it will not be surprising to see a patch being made available for older versions still being supported for Enterprise and Education customers sooner, as the firm notes that supported Windows versions that do not receive an update today will get one "shortly after July 6".
For those unaware, the PrintNightmare vulnerability is caused by the Print Spooler service not restricting access to a function that is used to install printer drivers remotely. An attacker that gains unrestricted access can execute arbitrary code with SYSTEM privileges, examples of which are already available on the web. Considering the severity of the vulnerability, it is best for all users to update to the latest build as soon as possible.
Update: The patches are available for most supported Windows 10, Windows 8.1, and Windows 7 (ESU users). You can either update via Windows Update, or head to the MSRC document to find links to the requisite Update Catalog pages. The company has also provided the KB article links, but as is the case these days, those pages are yet to be updated. Windows 10 version 1607, Windows Server 2012, and Windows Server 2016 are yet to receive updates.
Here is the complete list of links posted by the firm:
Product Severity Article Download Windows Server 2012 R2 (Server Core installation) Critical 5004954 Monthly Rollup Windows Server 2012 R2 (Server Core installation) Critical 5004958 Security Only Windows Server 2012 R2 Critical 5004954 Monthly Rollup Windows Server 2012 R2 Critical 5004958 Security Only Windows Server 2012 (Server Core installation) Critical Windows Server 2012 Critical Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Critical 5004953 Monthly Rollup Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Critical 5004951 Security Only Windows Server 2008 R2 for x64-based Systems Service Pack 1 Critical 5004953 Monthly Rollup Windows Server 2008 R2 for x64-based Systems Service Pack 1 Critical 5004951 Security Only Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Critical 5004955 Monthly Rollup Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Critical 5004959 Security Only Windows Server 2008 for x64-based Systems Service Pack 2 Critical 5004955 Monthly Rollup Windows Server 2008 for x64-based Systems Service Pack 2 Critical 5004959 Security Only Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Critical 5004955 Monthly Rollup Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Critical 5004959 Security Only Windows Server 2008 for 32-bit Systems Service Pack 2 Critical 5004955 Monthly Rollup Windows Server 2008 for 32-bit Systems Service Pack 2 Critical 5004959 Security Only Windows 8.1 for x64-based systems Critical 5004954 Monthly Rollup Windows 8.1 for x64-based systems Critical 5004958 Security Only Windows 8.1 for 32-bit systems Critical 5004954 Monthly Rollup Windows 8.1 for 32-bit systems Critical 5004958 Security Only Windows 7 for x64-based Systems Service Pack 1 Critical 5004953 Monthly Rollup Windows 7 for x64-based Systems Service Pack 1 Critical 5004951 Security Only Windows 7 for 32-bit Systems Service Pack 1 Critical 5004953 Monthly Rollup Windows 7 for 32-bit Systems Service Pack 1 Critical 5004951 Security Only Windows Server 2016 (Server Core installation) Critical Windows Server 2016 Critical Windows 10 Version 1607 for x64-based Systems Critical Windows 10 Version 1607 for 32-bit Systems Critical Windows 10 for x64-based Systems Critical 5004950 Security Update Windows 10 for 32-bit Systems Critical 5004950 Security Update Windows Server, version 20H2 (Server Core Installation) Critical 5004945 Security Update Windows 10 Version 20H2 for ARM64-based Systems Critical 5004945 Security Update Windows 10 Version 20H2 for 32-bit Systems Critical 5004945 Security Update Windows 10 Version 20H2 for x64-based Systems Critical 5004945 Security Update Windows Server, version 2004 (Server Core installation) Critical 5004945 Security Update Windows 10 Version 2004 for x64-based Systems Critical 5004945 Security Update Windows 10 Version 2004 for ARM64-based Systems Critical 5004945 Security Update Windows 10 Version 2004 for 32-bit Systems Critical 5004945 Security Update Windows 10 Version 21H1 for 32-bit Systems Critical 5004945 Security Update Windows 10 Version 21H1 for ARM64-based Systems Critical 5004945 Security Update Windows 10 Version 21H1 for x64-based Systems Critical 5004945 Security Update Windows 10 Version 1909 for ARM64-based Systems Critical 5004946 Security Update Windows 10 Version 1909 for x64-based Systems Critical 5004946 Security Update Windows 10 Version 1909 for 32-bit Systems Critical 5004946 Security Update Windows Server 2019 (Server Core installation) Critical 5004947 Security Update Windows Server 2019 Critical 5004947 Security Update Windows 10 Version 1809 for ARM64-based Systems Critical 5004947 Security Update Windows 10 Version 1809 for x64-based Systems Critical 5004947 Security Update Windows 10 Version 1809 for 32-bit Systems Critical 5004947 Security Update Update 2: The KB articles are now live for those interested in reading through the changelog. For Windows 10, the changelog is mostly similar across versions. Here is how the firm details the update:
-
Recommended Posts