PT-2021-23092 · Unknown +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.7 Description: The issue allows remote attackers to terminate calls by flooding a media port handling SRTP traffic with specially crafted SRTP packets, leading to denial of service. This can be done...

CLSA-2021-1634925634 Fixed 9 CVEs in squid34

CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack - CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-25097: fix improper input validation allowing HTTP smuggling from trusted client -...

CLSA-2021-1634925600 Fixed CVEs in squid: CVE-2020-15049, CVE-2020-14058

CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack...

Business Logic Errors in simplcommerce/simplcommerce

Description SimplCommerce allows negative product allowing one to get products for free The fix here https://github.com/simplcommerce/SimplCommerce/issues/971 does not work because client-side controls can by bypassed by modifying the POST request Proof of Concept 1: Add one $75 and $25 item in...

The vulnerability of the WordPress website content management system, related to authentication errors, allows a hacker to circumvent existing restrictions.

The vulnerability of the WordPress website content management system is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to bypass existing restrictions...

The vulnerability of the Synergia operating system, related to errors in access control policies of SELinux, allows a perpetrator to gain read access to system files.

The vulnerability of the Synergia operating system is related to errors in access control policies of SELinux. Exploiting this vulnerability can allow an attacker to gain read access to system files...

Why is Cybersecurity Failing Against Ransomware?

Yes, security is hard – no one is ever 100 percent safe from the threats lurking out there. But how is it that time and time again, companies – big companies – are continuing to fall for ransomware attacks? Why aren’t we getting any better at preventing them? Let’s explore the main reasons why,...

Rebalance will fail due to low precision of percentages

Handle cmichel Vulnerability details The AssetManager.rebalance function has a check at the end to ensure that all tokens are deposited again: requiretoken.balanceOfaddressthis == 0, "AssetManager: there are remaining funds in the fund pool"; The idea is that the last market deposits all...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to errors in the user interface’s information presentation, allows a perpetrator to carry out spear-phishing attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in information presentation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using specially crafted requests...

The vulnerability of Microsoft Excel editors, related to errors in code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Media Audio Decoder decoder in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Media Audio Decoder driver for the Windows operating system is related to errors in code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft DWM Core Library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Microsoft DWM Core Library in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate their privileges...

CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

PT-2021-8051

Name of the Vulnerable Software and Affected Versions Fanuc Series 32i affected versions not specified Description The issue is related to errors in resource management in the microprogram software of Fanuc Series 32i CNC controllers. Exploitation of this issue could allow a remote attacker to...

CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

Adobe Acrobat Reader Path Traversal Vulnerability

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A path traversal vulnerability exists in Adobe Acrobat Reader, which stems from a configuration or other error in the operation of the product. An unauthorized attacker could exploit the vulnerability to obtain...

The vulnerability of the Windows operating system, related to errors in security settings, allows a perpetrator to bypass the security mechanisms.

The vulnerability of the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security measures...

The vulnerability of Microsoft SharePoint Server’s software packages, related to errors in information presentation by the user interface, allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft SharePoint Server packages is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow a malicious actor to carry out spoofing attacks remotely...

The vulnerability of the win32k component of the Windows operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the win32k component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the win32k component of the Windows operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the win32k component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...