1062 matches found
Security update for dtc (low)
openSUSE Security Update: Security update for dtc Announcement ID: openSUSE-SU-2021:0746-1 Rating: low References: 1184122 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for dtc fixes the following issues: - make all...
OPENSUSE-SU-2021:0746-1 Security update for dtc
This update for dtc fixes the following issues: - make all packaged binaries PIE-executables bsc1184122. This update was imported from the SUSE:SLE-15-SP2:Update update project...
PT-2021-27347
Name of the Vulnerable Software and Affected Versions: dtc affected versions not specified Description: The issue with dtc involves making all packaged binaries PIE-executables. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
SUSE-SU-2021:1598-1 Security update for dtc
This update for dtc fixes the following issues: - make all packaged binaries PIE-executables bsc1184122...
PT-2021-28431
Name of the Vulnerable Software and Affected Versions: dtc affected versions not specified Description: The issue involves making all packaged binaries PIE-executables. No information is provided about the estimated number of potentially affected devices worldwide or details about real-world...
CVE-2021-1430
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...
Backdoor.Win32.Floder.gqe Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/0629e3b2ab8a973a3e37e4e97cb9cfea.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Floder.gqe Vulnerability: Insecure Permissions Description: The malware creates an...
Evasor - A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies
The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which generates for you a report including description,...
Trojan-Dropper.Win32.Dycler.vrp Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/1d6d6d3c077250b7b3ad053e71054ecc.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Dycler.vrp Vulnerability: Insecure Permissions Description: The malware creates...
Fedora: Security Advisory for mingw-binutils (FEDORA-2021-7ca24ddc86)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: mingw-binutils-2.34-8.fc34
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
Fedora: Security Advisory for mingw-binutils (FEDORA-2021-d23d016509)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for mingw-binutils (FEDORA-2021-9bd201dd4d)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Trojan-Dropper.Win32.Agent.xtp Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/360bbc9e0926488f085029948ff6c759.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Agent.xtp Vulnerability: Insecure Permissions Description: The malware creates ...
[SECURITY] Fedora 33 Update: mingw-binutils-2.34-8.fc33
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
Targeted Malware Reverse Engineering Workshop follow-up. Part 2
If you have read our previous blogpost "Targeted Malware Reverse Engineering Workshop follow-up. Part 1", you probably know about the webinar we conducted on April 8, 2021, with Kaspersky GReATs Ivan Kwiatkowski and Denis Legezo, to share best practices in reverse engineering and demonstrate...
[SECURITY] Fedora 32 Update: mingw-binutils-2.32-10.fc32
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
CVE-2021-22539
An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint .bzl files to be set via this config file. As such the attacker is able to execute any executable on the system through vscode-bazel. We recomme...
Improper access control
An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file upload allows an attacker to upload dangerous executables that bypass the file types allowed regardless of the file types allowed list in Media settings...
CVE-2020-29592
An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file upload allows an attacker to upload dangerous executables that bypass the file types allowed regardless of the file types allowed list in Media settings...