CVE-2021-20196

CVE-2021-20196 : In QEMU’s floppy disk emulator, a NULL pointer dereference can occur when processing read/write ioport commands if the selected floppy drive isn’t initialized with a block device. This may allow a privileged guest to crash the QEMU process on the host, causing a denial of service...

CVE-2021-20196: NULL Pointer Dereference

A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulti...

Iranian hackers hit Israel with disk wiper in disguise of ransomware

By Deeba Ahmed According to SentinelOne, Iranian hackers have developed a combo of disk wiper and ransomware and their target is Israel. This is a post from HackRead.com Read the original post: Iranian hackers hit Israel with disk wiper in disguise of ransomware...

Arbitrary File Deletion Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a WEB application development system. LCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to arbitrarily delete files...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.12 bug fix and security update

Red Hat OpenShift Container Platform release 4.7.12 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.7.12. Red Hat Product Security has rated this update as having a security impact of...

Information Disclosure

plone is vulnerable to information disclosure. A remotely authenticated manager is able to perform disk I/O through malicious keyword arguments to ReStructuredText transform...

Virtuozzo Hybrid Infrastructure 4.5 Update 1 Hotfix 3 (4.5.1-42)

This update provides fixes for the storage and compute services. Vulnerability id: VSTOR-43250 Load balancer members are not displayed in the self-service panel. Vulnerability id: VSTOR-43236 A Kubernetes VM's system disk may be out of space due to Podman logs. Vulnerability id: VSTOR-41499...

Information Disclosure

thunderbird is vulnerable to information disclosure. OpenPGP secret keys that were imported were stored unencrypted on the user's local disk...

[SECURITY] Fedora 33 Update: glibc-2.32-6.fc33

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

CVE-2021-33509

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script...

CVE-2021-33509

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script...

PYSEC-2021-81

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script...

CVE-2021-33509

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script...

Code injection

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script...

CVE-2021-33509

Plone 5.2.4 and earlier are affected by an arbitrary file-write vulnerability. Remote authenticated managers can cause disk I/O by sending crafted keyword arguments to the ReStructuredText transform in Python scripts, enabling potential file writes to the server. Root cause is exposed via docutil...

CVE-2021-33509

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script...

Getting a persistent shell on a 747 IFE

TL:DR The Coronavirus pandemic has hit the airline industry hard. One sad consequence was early retirement of most of the 747 passenger fleet. This does however create opportunities for aviation security research, as airframes are parked up before parting out in breakers yards. This 747 was flyin...

CVE-2021-33509: Incorrect Permission Assignment for Critical Resource

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script...

netty: Information disclosure via the local system temporary directory

In Netty there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used, a local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the...

Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches The issue is fixed by https://github.com/matrix-org/synapse/pull/9855. Workarounds There are no...