CVE-2021-27523: Undefined Security Weakness

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface...

PT-2023-23868 · Intel · Mavinci Desktop

Name of the Vulnerable Software and Affected Versions: MAVinci Desktop Software for IntelR Falcon 8+ versions prior to 6.2 Description: The issue is related to incorrect default permissions in the software, which may allow an authenticated user to potentially enable escalation of privilege via...

CVE-2021-27523

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface...

PT-2023-12117 · Unknown · Open-Falcon Dashboard

Name of the Vulnerable Software and Affected Versions: open-falcon dashboard version 0.2.0 Description: An issue was discovered in the open-falcon dashboard, allowing remote attackers to gain, modify, and delete sensitive information via a crafted POST request to the register interface...

Open-Falcon dashboard security vulnerability

dashboard is Open-Falcon open source an Open Falcon unified default front-end component. A security vulnerability exists in Open-Falcon dashboard version 0.2.0, which originated from a vulnerability that allows an attacker to obtain, modify, and delete sensitive information by designing the POST...

Intel Falcon 8+ Security Vulnerability

Intel Falcon 8+ is a professional-grade drone from Intel Corporation USA. A security vulnerability exists in Intel Falcon 8+ MAVinci Desktop Software prior to version 6.2, which stems from incorrect default permissions. An attacker can exploit the vulnerability to elevate privileges...

MAVinci Desktop Software for Intel® Falcon 8+ Advisory

Summary: A potential security vulnerability in the MAVinci Desktop software for Intel® Falcon 8+ may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for MAVinci Desktop software for Intel® Falco...

CVE-2023-38697

protocol-http1 provides a low-level implementation of the HTTP/1 protocol. RFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension. The value of Content-Length header should be a string of 0-9 digits, the chunk size should be a string of hex digits and should split...

Design/Logic Flaw

protocol-http1 provides a low-level implementation of the HTTP/1 protocol. RFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension. The value of Content-Length header should be a string of 0-9 digits, the chunk size should be a string of hex digits and should split...

CVE-2023-38697 protocol-http1 HTTP Request/Response Smuggling vulnerability

protocol-http1 provides a low-level implementation of the HTTP/1 protocol. RFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension. The value of Content-Length header should be a string of 0-9 digits, the chunk size should be a string of hex digits and should split...

protocol-http1 environmental issue vulnerability

protocol-http1 is a low-level implementation of HTTP/1. An environmental issue vulnerability exists in protocol-http1 versions prior to 0.15.1, which stems from an RFC rule violation by Falcon, leading to HTTP request smuggling and firewall bypass issues...

protocol-http1 HTTP Request/Response Smuggling vulnerability

Impact RFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension detailed ABNF is in Appendix section. In summary: - The value of Content-Length header should be a string of 0-9 digits. - The chunk size should be a string of hex digits and should split from chunk data...

protocol-http1 HTTP Request/Response Smuggling vulnerability

Impact RFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension detailed ABNF is in Appendix section. In summary: - The value of Content-Length header should be a string of 0-9 digits. - The chunk size should be a string of hex digits and should split from chunk data...

CrowdStrike Falcon Sensor Installed (MacOSX)

Binary data crowdstrikefalconsensormacosinstalled.nbin...

Intel® QAT Advisory

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT drivers for Windows may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41699...

Intel® EMA Configuration Tool and Intel® MC Software Advisory

Summary: A potential security vulnerability in Intel® Endpoint Management Assistant EMA Configuration Tool and Intel® Manageability Commander MC software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID:...

Desert Falcon Strikes with an Upgraded Arsenal

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Desert Falcons, a cyber-espionage group, has been seen deploying upgraded variants of its malware toolset in strikes against Palestine and Middle Eastern entities. To receive real-time threat advisories,...

falcon-parts.cz Cross Site Scripting vulnerability OBB-3256912

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CrowdStrike Falcon Agent 6.44.15806 Uninstall Issue

Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token Date: 30/11/2022 Exploit Author: Walter Oberacher, Raffaele Nacca, Davide Bianchin, Fortunato Lodari, Luca Bernardi Deda Cloud Cybersecurity Team Vendor Homepage: https://www.crowdstrike.com/ Author Homepage...

CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token Vulnerability

Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token Exploit Author: Walter Oberacher, Raffaele Nacca, Davide Bianchin, Fortunato Lodari, Luca Bernardi Deda Cloud Cybersecurity Team Vendor Homepage: https://www.crowdstrike.com/ Author Homepage:...