6044 matches found
CVE-2021-1265 Cisco DNA Center Information Disclosure Vulnerability
A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The vulnerability is due to the configuration archives files being stored in clear...
CVE-2021-1265 Cisco DNA Center Information Disclosure Vulnerability
A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The vulnerability is due to the configuration archives files being stored in clear...
Malwarebytes Hit by SolarWinds Attackers
Malwarebytes is the latest discovered victim of the SolarWinds hackers, the security company said – except that it wasn’t targeted through the SolarWinds platform. “While Malwarebytes does not use SolarWinds, we, like many other companies were recently targeted by the same threat actor,” it...
PT-2021-1811 · Cisco · Cisco Dna Center
Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: The issue is related to the configuration archive functionality, where confidential information is stored unencrypted. This could allow a remote attacker to gain unauthorized acces...
The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the execution environment for remote process calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the execution environment for remote process calls in the Windows operating system allows attackers to exploit their privileges.
The vulnerability of the execution environment for remote process calls in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
SysWhispers2 - AV/EDR Evasion Via Direct System Calls
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference BetweenSysWhispers 1 and 2 The usage is almost identical to SysWhispers1 but...
Rock RMS File Upload / Account Takeover / Information Disclosure
Title ========================= Multiple vulnerabilities found in Rock RMS including RCE and account takeover. A total of three CVEs were issued for the vulnerabilities CVE-2019-18641, CVE-2019-18642, CVE-2019-18643 Product Description ========================= Rock RMS is an open source CRM...
Denial Of Service (DoS)
Xen is vulnerable to denial of service. A stack overflow due to recursive function calls allows an attacker to crash the application...
Zammad Access Control Error Vulnerability
Zammad is a Web-based open source helpdesk/customer support system. An access control error vulnerability exists in Zammad versions prior to 3.5.1. An attacker can exploit this vulnerability to bypass auditing and change Ticket Article data via REST API calls...
Denial Of Service (DoS)
gobby is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
Null pointer dereference
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 is affected by a NULL pointer dereference in the D-Bus handler for certain set_language calls. The issue, described as a denial-of-service risk (crash) on the targeted app, is noted across multiple advisories (e.g., Arch Linux ASA-202101-26) with upstream fixes referenced (upgrade to...
Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers
New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email. The hacking endeavor was reported to the company by Microsoft's Threat Intelligence Center on...
An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.
...
The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows attackers to disclose sensitive information that should be protected.
The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information by using system calls such as ioctls KDGKBSENT and KDSKBSENT...