9431 matches found
No Auth, Seamless Database Security and Compliance
As data breaches continue to target databases and attack techniques become more sophisticated over time, organizations are looking for dynamic and efficient ways to effectively monitor the compliance posture of the databases in their hybrid environments. They have traditionally used privileged...
file bug fix and enhancement update
The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format ELF binary files, system libraries, RPM packages, and different graphics formats. Bug Fixes and Enhancements:...
wpa_supplicant and hostapd 输入验证错误漏洞
hostapd is a user space daemon for access points and authentication servers. wpasupplicant is a cross-platform WPA request program. The program supports WEP, WPA, and WPA2, among others. An input validation error vulnerability exists in wpasupplicant and hostapd 2.9, which stems from improper...
Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting
As seen in recent sophisticated cyberattacks, especially human-operated campaigns, it’s critical to not only detect an attack as early as possible but also to rapidly determine the scope of the compromise and predict how it will progress. How an attack proceeds depends on the attacker’s goals and...
A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.
...
CVE-2021-22986
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note...
CVE-2020-35508
CVE-2020-35508 is a Linux kernel issue describing a race condition and incorrect initialization of the child/parent process ID handling when filtering signal handlers. The flaw permits a local attacker to bypass checks and send signals to a privileged process. Multiple Nessus/MiracleLinux Unity a...
Moderate: Red Hat Security Advisory: pki-core and redhat-pki-theme security and bug fix update
An update for pki-core and redhat-pki-theme is now available for Red Hat Certificate System 9.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Vajra - A Highly Customi zable Target And Scope Based Automated Web Hacking Framework To Automate Boring Recon Tasks
An automated web hacking framework for web applications Detailed insight about Vajra can be found at https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8 About Vajra Vajra is an automated web hacking framework to automate boring recon tasks and same...
[SECURITY] Fedora 34 Update: suricata-6.0.2-1.fc34
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
SUSE-SU-2021:0853-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-19734 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check bsc1179664. - Fixed ...
The vulnerability of the rand() and random() functions in software certification for wireless network WPA devices, related to the lack of entropy in PIN selection, allows a hacker to trigger a service failure.
The vulnerability of the rand and random functions in software device certification for wireless networks with WPA security is related to a lack of entropy in the PIN selection process. Exploiting this vulnerability could allow an attacker to trigger a service failure...
[SECURITY] Fedora 32 Update: suricata-5.0.6-1.fc32
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
[SECURITY] Fedora 33 Update: suricata-5.0.6-1.fc33
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
CVE-2021-27363
An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file...
CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft's Dream of Decentralized IDs Enters the Real World
The company will launch a public preview of its identification platform this spring—and has already tested it at the UK's National Health Service...
CVE-2021-25914
creationtimestamp| type| source ---|---|--- 2021-03-01 20:43:19+00:00| seen| https://t.me/cibsecurity/24304 2025-04-30 18:14:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14118...