SQL Injection Vulnerability in Guangzhou Tutron interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSJObjBtreeNode>::

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4735739433713664 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

Logic flaw vulnerability in interlib library cluster management system

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

Salesforce Ventures, Blackstone, and Aglaé Join Team Wiz!

Last week Wiz closed its Series B, which we had previously announced in March, with an additional $120 million investment from Salesforce Ventures and Blackstone with participation from Aglaé Ventures...

Siemens SIMATIC RFID (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC RF Products Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-21-159-13 Siemens SIMATIC RFID Readers...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, apfs_omap_key const*>::type APFSBtreeNode<apfs_omap_ke

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6402896596959232 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62500001015f...

Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2020-1968 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a Raccoon attack in the TLS specification. B...

Double-Encrypting Ransomware

This seems to be a new tactic: Emsisoft has identified two distinct tactics. In the first, hackers encrypt data with ransomware A and then re-encrypt that data with ransomware B. The other path involves what Emsisoft calls a "side-by-side encryption" attack, in which attacks encrypt some of an...

A/B Testing, Now with EdgeKV

This blog was co-authored by Tim Vereecke, Josh Johnson, and Medhat Yakan This is a blog series about building an A/B test with EdgeWorkers and EdgeKV. Read part one here. In our previous blog, we wrote the base code for our A/B test and stored the data locally. Although this may be convenient fo...

A/B Testing, Now with EdgeKV

Now that we've written the framework of our code, let's layer in EdgeKV EKV, our distributed key-value store database...

Building an A/B Test with EdgeWorkers and EdgeKV

This blog was co-authored by Tim Vereecke, Josh Johnson, and Medhat Yakan This is a blog series about building an A/B test with EdgeWorkers and EdgeKV. Read part two here. When paired with our new EdgeKV distributed key-value database, the Akamai EdgeWorkers serverless platform gives you the...

PT-2021-10686

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists via the bit read B function in the bits.c file. This could potentially allow for exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricti...

PT-2024-11150 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the btrfs file system in the Linux kernel. When an inode is moved from one directory to another and both the inode and its previous parent directory wer...

PT-2021-18308 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4 Description: An attacker can cause a denial of service via a FPE runtime error in tf.raw ops.SparseMatMul...

HPESBST04135 rev.1 - HPE B-Series SANnav Management Portal, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information, Disclosure of Sensitive Information, Unauthorized Access to Files, Unauthorized Information Disclosure, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav...

Siemens SCALANCE W1750D (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE W1750D Vulnerabilities: Improper Authentication, Classic Buffer Overflow, Command Injection, Improper Input Validation, Race Condition, Cross-site Scripting, Basic XSS,...

Delta Industrial Automation CNCSoft-B DOPSoft DPA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2020-1971 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference. If the GENERALNAMEcmp function contain an...

The vulnerability of the CNCSoft-B software for numerical control systems lies in its ability to write beyond buffer boundaries, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CNCSoft-B software for numerical control systems is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5125802023845888 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62100001653f...