Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-2901)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command Injection

maven-shared-utils is vulnerable to command injection. The vulnerability exists in BourneShell and Commandline classes due to improper escaping which allows a malicious attacker to inject and execute arbitrary commands...

PT-2021-7988

Name of the Vulnerable Software and Affected Versions Emerson Dixell XWEB-500 affected versions not specified Description The issue is related to an arbitrary file write vulnerability in the /cgi-bin/logo extra upload.cgi, /cgi-bin/cal save.cgi, and /cgi-bin/lo utils.cgi API endpoints. This...

PT-2021-27018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description The issue concerns an out-of-bounds read and write in the hw atl utils fw rpc wait function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26949

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue concerns an out-of-bounds read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26880

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.220 Description The issue concerns an out-of-bounds OOB read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164 Description The issue concerns an out-of-bounds read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

CVE-2021-3815

utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

AirStrike - Automatically Grab And Crack WPA-2 Handshakes With Distributed Client-Server Architecture

Tool that automates cracking of WPA-2 Wi-Fi credentials using client-server architecture Requirements Airstrike uses Hashcat Brain Architecture, aircrack-ng suite, entr utility and some helper scripts. You can use install.sh script to download all dependencies if you're on system which has an...

[SECURITY] Fedora 34 Update: dmtx-utils-0.7.6-9.fc34.1

libdmtx is open source software for reading and writing Data Matrix 2D bar-codes on Linux, Unix, OS X, Windows, and mobile devices. At its core libdmtx is a shared library, allowing C/C++ programs to use its capabilities without restrictions or overhead. The included utility programs, dmtxread an...

Fedora: Security Advisory for dmtx-utils (FEDORA-2021-b58af96f33)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Prototype Pollution

Overview @fabiocaccamo/utils.js is a JavaScript utils for lazy devs. Affected versions of this package are vulnerable to Prototype Pollution via the set and method, which merges the path and value parameters based on the key:value. PoC const utils = require"@fabiocaccamo/utils.js"; const obj = ;...

The vulnerability of the Java library for determining, analyzing, checking, and migrating cron elements in cron-utils, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Java library for determining, analyzing, checking, and migrating cron elements in cron-utils is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

In the Linux kernel through 5.15.2 hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.

...

CVE-2021-41269

A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...

openSUSE: Security Advisory for drbd-utils (openSUSE-SU-2021:3665-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cron Utils Code Injection Vulnerability

Cron Utils is Jmrozanec individual developers of a Java code base for validating , parsing , migrating Cron expressions . A code injection vulnerability exists in Cron Utils that allows an attacker to inject arbitrary Java EL expressions to execute remote code...

SUSE SLES15 Security Update : drbd-utils (SUSE-SU-2021:3665-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:3665-1 advisory. - make all binaries position independent basc1185132. - Upgrade to 9.0.18 bsc1189363 build: remove rpm related targets drbdsetup,v84: fix minor compile...

openSUSE 15 Security Update : drbd-utils (openSUSE-SU-2021:3665-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:3665-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...