Vulnerability of the extractContigSamples32bits() function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the extractContigSamples32bits function in the LibTIFF library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure using specially created data...

Meet unprecedented security challenges by leveraging MXDR services

We know customers of every size face ever-increasing security risks. In just the last 12 months the speed of attackers leveraging breaches is also increasing, as it only takes 72 minutes on average for an attacker to access private data from the time a user falls victim to a phishing email.1 Data...

CVE-2023-37286

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service...

PT-2023-25883 · Smartisoft · Smartbpm.Net

Name of the Vulnerable Software and Affected Versions: SmartSoft SmartBPM.NET affected versions not specified Description: The issue is related to the use of a hard-coded machine key in SmartSoft SmartBPM.NET. This allows an unauthenticated remote attacker to send a serialized payload to the...

The vulnerability of LISP traffic analyzer software in Wireshark allows a hacker to cause a service failure.

The vulnerability of the LISP analyzer in Wireshark for analyzing computer network traffic is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting a specific package or creating a capture file...

The vulnerability of the VirtualServerRpm component (/userRpm/VirtualServerRpm.htm) of TP-Link routers such as TL-WR940N, TL-WR841N, TL-WR941N, and TL-WR740N allows a hacker to cause service interruptions.

The vulnerability of the VirtualServerRpm component /userRpm/VirtualServerRpm.htm of TP-Link routers such as TL-WR940N, TL-WR841N, TL-WR941N, and TL-WR740N lies in the fact that the operation outside the buffer in memory occurs when processing the Changed key parameter. Exploiting this...

EulerOS 2.0 SP9 : screen (EulerOS-SA-2023-2342)

According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users...

EulerOS 2.0 SP9 : screen (EulerOS-SA-2023-2322)

According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users...

JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident

JumpCloud, a provider of cloud-based identity and access management solutions, has swiftly reacted to an ongoing cybersecurity incident that impacted some of its clients. As part of its damage control efforts, JumpCloud has reset the application programming interface API keys of all customers...

JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident

JumpCloud, a provider of cloud-based identity and access management solutions, has swiftly reacted to an ongoing cybersecurity incident that impacted some of its clients. As part of its damage control efforts, JumpCloud has reset the application programming interface API keys of all customers...

The vulnerability of the StackRot memory management subsystem in Linux kernel allows a attacker to escalate their privileges or cause service interruptions.

The vulnerability of the StackRot memory management subsystem in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges or cause service interruptions...

The five-day job: A BlackByte ransomware intrusion case study

As ransomware attacks continue to grow in number and sophistication, threat actors can quickly impact business operations if organizations are not well prepared. In a recent investigation by Microsoft Incident Response previously known as Microsoft Detection and Response Team – DART of an...

UBUNTU-CVE-2023-25523

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service...

The vulnerability of the TrueConf Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges and cause service failures.

The vulnerability of the TrueConf Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service interruptions...

The vulnerability of the packeIO daemon in the Juniper Networks Junos OS Evolved operating system affects devices PTX10003, PTX10004, and PTX10008. This allows a malicious actor to cause service interruptions.

The vulnerability of the packeIO daemon in the Juniper Networks Junos OS Evolved devices of models PTX10003, PTX10004, and PTX10008 is related to improper checking of unusual or exceptional conditions. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

Ubuntu 16.04 ESM / 18.04 ESM : GNU Screen vulnerability (USN-6198-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6198-1 advisory. It was discovered that GNU Screen was not properly checking user identifiers before sending certain signals to target processes. If GNU Screen was...

The vulnerability of the Google Chrome browser extension allows a perpetrator to access confidential data, compromise its integrity, and also cause service interruptions.

The vulnerability of the Google Chrome browser extension is related to the overflow of the heap buffer and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions throug...

The vulnerability of the Google Chrome browser’s guest mode allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s guest mode is related to buffer overflows and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service interruptions through a specially...

The vulnerability of the account_operator.cgi file in the microprogramming software for ZyXEL USG FLEX and VPN devices allows a hacker to alter the device’s configuration data and trigger a service failure.

The vulnerability of the accountoperator.cgi file in the ZyXEL USG FLEX and VPN networking devices relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor to remotely alter the device’s...

The vulnerability of Google Chrome’s libphonenumber library allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s libphonenumber library is related to buffer overflows and the installation of malicious extensions. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and even cause service interruptions through a specially...