CVE-2021-0006: Improper Handling of Exceptional Conditions

Improper conditions check in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.4.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0005: Improper Handling of Exceptional Conditions

Uncaught exception in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0004: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the firmware of IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access...

PT-2021-12862

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Controllers 800 series Linux drivers versions prior to 1.4.11 Description: The issue is related to an improper conditions check in some IntelR Ethernet Controllers 800 series Linux drivers, which may allow an authenticated use...

PT-2021-12863

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Controllers 800 series Linux drivers versions prior to 1.4.11 Description: The issue is related to an improper conditions check in the Linux drivers for IntelR Ethernet Controllers 800 series. This may allow an authenticated...

PT-2021-12868

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapters 800 Series Controllers and associated adapters versions prior to 1.5.3.0 Description: The issue is related to uncontrolled resource consumption in the firmware of IntelR Ethernet Adapters 800 Series Controllers and...

Intel Ethernet Controllers: Input validation error vulnerability

Intel Ethernet Controllers is an Ethernet controller from Intel Corporation USA. A security vulnerability exists in the Intel Ethernet Controllers X722 and 800 series, which stems from incorrect input authentication in the Linux RMDA driver. The vulnerability could allow an authenticated user to...

CVE-2021-0084: Improper Input Validation

Improper input validation in the IntelR Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-12897

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Controllers X722 and 800 series Linux RMDA driver versions prior to 1.3.19 Description: The issue is related to improper input validation in the IntelR Ethernet Controllers X722 and 800 series Linux RMDA driver, which may allo...

PT-2021-12869

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapters 800 Series Controllers and associated adapters versions prior to 1.5.3.0 Description: The issue is related to an out-of-bounds read in the firmware, which may allow an unauthenticated user to potentially enable denial...

Intel Ethernet Linux Driver Advisory - Lenovo Support US

No description provided...

Intel® Ethernet Linux Driver Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Controllers X722 and 800 series Linux drivers may allow denial of service, escalation of privilege or information disclosure. Intel is releasing software driver updates to mitigate these potential vulnerabilities. Vulnerability...

Chinese Hackers Target Major Southeast Asian Telecom Companies

Three distinct clusters of malicious activities operating on behalf of Chinese state interests have staged a series of attacks to target networks belonging to at least five major telecommunications companies located in Southeast Asian countries since 2017. "The goal of the attackers behind these...

AD Starter Scan - Unconstrained delegation

Binary data adsikerberosdeleg.nbin...

Microsoft warns of PetitPotam attack taking over Windows domains

By Deeba Ahmed Experts reveal that the PetitPotam attack forces remote Windows servers such as Domain Controllers to validate a malicious destination. This is a post from HackRead.com Read the original post: Microsoft warns of PetitPotam attack taking over Windows domains...

PT-2021-3762

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAScreen versions prior to 1.1.0 Description The issue is related to type confusion errors in the software for programmable logic controllers DIAScreen. This may allow an attacker to remotely execute arbitrary code by sendin...

New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains

A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain. The...

Exploit for CVE-2020-1472

PoC exploit for CVE-2020-1472 ZeroLogon vulnerability. The target product/service is Windows Domain Controller DC. The vulnerability class/vector is authentication bypass via all-zero challenge. The probable entry point is the Netlogon service, which is accessed via the Impacket library. Notable...

CVE-2021-20593

Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and...

Design/Logic Flaw

Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and...