Vulnerability Audit Reports

Firefox 92

Firefox 92 and ESR 78.14 have been released with minor features and security fixed. you can find the Firefox report here.

MacOS IOMobileFrameBuffer 0-day Report

Hi all,Apple released a new patch for CVE-2021-30807 which is actively being exploited. You MacOS should be up to 11.5.1, you can use the MacOS IOMobileFrameBuffer report to check.

I've created a blog detailing this new vulnerability and how to mitigate it which you can find in the PetitPotam NTLM Relay Attack Allows Domain Takeover blogWhile there isn't a really specialized rep...

Firefox 90

Hi all,Firefox 90 and the corresponding ESR released were released last Tuesday. Here is the Firefox 90 report.

Print Spooler Service Vulnerability

Another vulnerability has been found in the Print Spooler Service, CVE-2021-34481I've created another Print Spooler service report and updated the original blog post.Time to disable the service again!...

Kaseya VSA REvil Ransomware Attack

If you happen to use Kaseya, it is advised to shut down the services completely as their are being used to deploy REvil Ransomware.You can find a report to detect any machine running a Kaseya Service ...

PrintNightmare 0-day vulnerability

Hi all,A 0-day vulnerability has been accidentally leaked by Microsoft which affects the Print Spooler service. IT can lead to RCE and a domain takeover so it is advised to disable the service on all ...

Dell SupportAssist BIOSConnect Vulnerability

Dell released a new advisory regarding a vulnerability in their BIOSConnect feature. This feature is embedded in their BIOS and required a manual bios update to fix. Removing SupportAssist will not fi...

Vulnerabilities in VMware Tools, VMRC, App Volumes and Carbon Black App Control

Hi,Vmware released two new advisories regarding vulnerabilities in VMware Tools, VMRC, App Volumes and Carbon Black App Control. To check if you have outdated installations you can find the report her...

Intel June 2021 Platform Vulnerabilities

Intel released its June 2021 platform update which included a lot of vulnerability fixes.I've created a blog post with some reports to help identify and patch affected systems.

Cisco Webex Network Recording Player Vulnerability

Cisco has released a few new advisories regarding their Webex Network Recording Player and Webex Player. You can find a blog and report to check if you've been affected here.

DNS injection report

Hi,Related to the FragAttack vulnerability, I've also created a report to check if you've got assets that are not running your preferred DNS settings. You can find the report here.

VMware vCenter vSAN Vulnerability Report (VMSA-2021-0010)

VMware yesterday released a new critical advisory for vCenter servers. I've created a blog + report detailing the vulnerability and a report which indicates whether you are vulnerable or not.

Can someone post a report on the new Dell dbutil driver vulnerability?

I don't know how to make reports but Lansweeper has done a fantastic job posting reports of monthly patch checking, Chrome and Firefox vulnerabilities, the recent NVidia driver vulnerability.There's a...

Firefox 87 Audit report incorrect

The Firefox 87 Audit report seems incorrect. It's not flagging Firefox (non-ESR) between 84-86 for example.

Unauthorized Software Query how to add Whatsapp?

Hello, I do have this query which is quite good, to check unauthorized apps in our machines, but I can see there is a few apps missing like "Whatsapp" for example. How can we add a software to this ta...

Exchange Server Zero-day Vulnerability Audit - didn't work

We have a single 2016 Exchange 2016 CU19, on Win Server 2016 w/ Feb 2021 cumulative. I see "Security Update For Exchange Server 2016 CU19 (KB5000871)" as Successfully installed when I check Windows U...

Adobe Report for CVE-2021-21017

Is there a report for this latest Adobe vulnerability (CVE-2021-21017)?Adobe Security Bulletin APSB20-67https://helpx.adobe.com/security/products/acrobat/apsb21-09.html

Blog Articles