CVE-2021-20589

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

Buffer overflow

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

CVE-2021-20589

The CVE-2021-20589 vulnerability affects Mitsubishi Electric GOT2000, GOT SIMPLE GS21, GT SoftGOT2000, and LE7-40GU-L MODBUS/TCP implementations. Root cause: Buffer access with an incorrect length value (CWE-805) in the MODBUS/TCP slave function allows a remote, unauthenticated attacker to stop t...

CVE-2021-20589

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

CVE-2021-29691

IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 200252...

A Look Into Remote Onboarding at Rapid7

Picture this; you accept a new role and walk in on your first day with jitters. You swing the double doors open and are welcomed by the fresh scent of kombucha on tap and the buzz of office chatter. The front desk receptionist welcomes you with a warm “hello!” and a freshly brewed tea or coffee. ...

gdm: inability to timely contact accountservice via dbus leads gnome-initial-setup to creation of account with admin privileges

A vulnerability was found in GDM. If gdm can't contact the AccountService service via DBus in a timely manner it would default to assume there are no existing users and would allow the attacker to create a new user with high privileges...

Denial of Service Vulnerability in FAST FAC1203R, FR100P-AC, FAC1900R, FAC1200R

Shenzhen FAST Communication Technology Co., Ltd hereinafter referred to as FAST is a provider of client-side network and communication technology and equipment in China. Founded in 2002, headquartered in Shenzhen high-tech industrial zone. It is a high-tech enterprise with complete independent R&...

Denial of Service Vulnerability in FAST FWB201S, FWB505, FAC1203R, FWB200

Shenzhen FAST Communication Technology Co., Ltd hereinafter referred to as FAST is a provider of client-side network and communication technology and equipment in China. Founded in 2002, headquartered in Shenzhen high-tech industrial zone. It is a high-tech enterprise with complete independent R&...

Binary Vulnerability in MERCURY M6G, D196G, D12A, D121G

Shenzhen Mercury Communication Technology Co., Ltd hereinafter referred to as MERCURY was founded in 2001, has a well-known independent brand "MERCURY Mercury", focusing on network communications, security monitoring field to provide excellent products and solutions. A binary vulnerability exists...

Denial of Service Vulnerability in FAST FWB201S, FWB505, FAC1203R, FWB200

Shenzhen FAST Communication Technology Co., Ltd hereinafter referred to as FAST is a provider of client-side network and communication technology and equipment in China. Founded in 2002, headquartered in Shenzhen high-tech industrial zone. It is a high-tech enterprise with complete independent R&...

Binary Vulnerability in FWB, FAC Series Routers of Shenzhen Xunjie Communication Technology Co.

FWB, FAC series is a router from Shenzhen Xunjie Communication Technology Co., Ltd, including FWB201S, FWB505, FAC1203R, FWB201, FAC1900R, FWB200, FAC1200R and so on. A binary vulnerability exists in the FWB, FAC series routers of Shenzhen Xunjie Communication Technology Co. Ltd, which can be...

Logic Flaw Vulnerability in ZXHN F450A

ZTE Corporation is a leading global provider of integrated communications solutions. Its main products include 2G/3G/4G/5G wireless base stations and core networks, IMS, fixed-line access and bearer, optical networks, chipsets, high-end routers, smart switches, government and enterprise networks,...

Persistence – AMSI

AMSI Antimalware Scan Interface is a vendor agnostic interface which can communicate with the endpoint in order to prevent execution of malware. The scan performed… Continue reading - Persistence - AMSI...

PT-2024-11227 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.8 Description: A memory leak vulnerability has been identified in the Linux kernel's NFC subsystem, specifically in the nci allocate device function. The nfcmrvl disconnect function fails to free the hci de...

Weak Password Vulnerability in NBG-416N of Zhongqin Communication Equipment Trading (Shanghai) Co.

NBG-416N is a wireless router device launched by Zongqin Communication Equipment Trading Shanghai Co. Ltd. NBG-416N has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Backdoor.Win32.Delf.abb Insecure Transit

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/2910c3bea6732d5ed81a7c44d4354136.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.abb Vulnerability: Insecure Transit Description: The malware listens on TCP port...

FIN7 Backdoor Masquerades as Ethical Hacking Tool

The notorious FIN7 cybercrime gang, a financially motivated group, is spreading a backdoor called Lizar under the guise of being a Windows pen-testing tool for ethical hackers. According to the BI.ZONE Cyber Threats Research Team, FIN7 is pretending to be a legitimate organization that hawks a...

Report to Your Management with the Definitive 'Incident Response for Management' Presentation Template

Security incidents occur. It's not a matter of 'if' but of 'when.' There are security products and procedures that were implemented to optimize the IR process, so from the 'security-professional' angle, things are taken care of. However, many security pros who are doing an excellent job in handli...

Weak Password Vulnerability in 26G-2F-MANAGED of Shenzhen WANET Botong Technology Co.

Dedicated to the development and application of network communication products and IoT security control platform, it is a next-generation vendor of intelligent network solutions for weak power and IoT security solutions. Weak password vulnerability exists in 26G-2F-MANAGED of Shenzhen WANET BOTTO...