[SECURITY] Fedora 32 Update: kernel-5.11.11-100.fc32

The kernel meta package...

DEBIAN-CVE-2021-28165

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame...

CVE-2021-28165

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame...

CVE-2021-28165

The CVE-2021-28165 issue affects Eclipse Jetty versions 7.2.2–9.4.38, 10.0.0.alpha0–10.0.1, and 11.0.0.alpha0–11.0.1, where handling a large invalid TLS frame can cause CPU usage to reach 100%, leading to resource exhaustion. The underlying cause is described as abnormal processing after receivin...

SQL Injection Vulnerability in Shining Shipping 100 Virtual Goods Auto-Shipping System

Shipping 100-Virtual Goods Autoship System is a powerful virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

[SECURITY] Fedora 32 Update: kernel-5.11.10-100.fc32

The kernel meta package...

[SECURITY] Fedora 32 Update: kernel-5.11.7-100.fc32

The kernel meta package...

CVE-2021-20018

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...

[SECURITY] Fedora 32 Update: kernel-5.10.20-100.fc32

The kernel meta package...

SQL Injection Vulnerability in Shipment 100 Virtual Goods Auto-shipment System (CNVD-2021-21530)

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in Ship 100 Virtual Goods Auto Shipment System, which can be exploited by attackers to obtain sensitive information from the database...

XSS Vulnerability in Ship 100 Virtual Goods Autoship System (CNVD-2021-19737)

Shipping 100 virtual goods automatic delivery system is a powerful virtual goods automatic delivery system/article pay to read the system, without human guards, customers can buy online to automatically complete the transaction. Support out-of-stock reminders/quick login/recycling bin/no login to...

File Upload Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. A file upload vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to gain server privileges...

SQL Injection Vulnerability in T1 of Shipment 100 Virtual Goods Autoship System (CNVD-2021-21567)

Shipment 100-Virtual Goods Auto Shipment System is a powerful virtual goods automatic shipment system/article pay to read the system, without human guards, customers can buy online to automatically complete the transaction. It supports out-of-stock reminders/quick login/recycling bin/no-login...

SonicWall Releases Additional Patches

SonicWall has released firmware patches for SMA 100 series products in an update to its previous alert from February 3, 2021. A remote attacker could exploit a vulnerability in versions of SMA 10 prior to 10.2.0.5-29sv to take control of an affected system. CISA encourages users and administrator...

VMware Carbon Black Named to the 2021 CRN Security 100 List

We are proud to announce that CRN®, a brand of The Channel Company, has named VMware Carbon Black to its annual Security 100 list. The Security 100 list features leading IT channel security vendors and is compiled by a panel of CRN editors, recognizing channel-focused security vendors across five...

SonicWall Zero-Day

Hackers are exploiting a zero-day in SonicWall: In an email, an NCC Group spokeswoman wrote: "Our team has observed signs of an attempted exploitation of a vulnerabilitythat affects the SonicWall SMA 100 series devices. We are working closely with SonicWall to investigate this in more depth." In...

SonicWall SMA 100 Series 10.x Firmware Zero-Day Vulnerability

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x. Recent assessments: wvu-r7 at February 04, 20...

Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices

SonicWall on Monday warned of active exploitation attempts against a zero-day vulnerability in its Secure Mobile Access SMA 100 series devices. The flaw, which affects both physical and virtual SMA 100 10.x devices SMA 200, SMA 210, SMA 400, SMA 410, SMA 500v, came to light after the NCC Group on...

Zero-Day Vulnerability in SonicWall SMA 100 Series Version 10.x Products

CISA is aware of a vulnerability in SonicWall Secure Mobile Access SMA 100 series products. SMA 100 series products provide an organization’s employees with remote access to internal resources. SonicWall security and engineering teams have confirmed a zero-day vulnerability that was reported by a...

SonicWall Breach Stems from ‘Probable’ Zero-Days

UPDATE SonicWall is investigating “probable” zero-day flaws in its remote access security products that have been targeted by “highly-sophisticated” attackers. The company says it is investigating the attack and will update customers within 24 hours. The security company said it is currently...