38663 matches found
Rockwell Automation Encourages Customers to Assess and Secure Public-Internet-Exposed Assets
Rockwell Automation has released guidance encouraging users to remove connectivity on all Industrial Control Systems ICS devices connected to the public-facing internet to reduce exposure to unauthorized or malicious cyber activity. Users and administrators are encouraged review the following...
SUSE CVE-2024-35857
In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmpbuildprobe First problem is a double call to indevgetrcu, because the second one could return NULL. if indevgetrcudev && indevgetrcudev-ifalist Second problem is a read from...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from blindly reading the ip address in ftracebug...
Your vacation, reservations, and online dates, now chosen by AI: Lock and Code S05E11
This week on the Lock and Code podcast… The irrigation of the internet is coming. For decades, we’ve accessed the internet much like how we, so long ago, accessed water—by traveling to it. We connected quite literally, we logged on, and we zipped to addresses and sites to read, learn, shop, and...
The vulnerability of the tcp_ao_connect_init() function in the Linux operating system’s IPv4 protocol implementation allows a hacker to cause a service failure.
The vulnerability of the tcpaoconnectinit function in the net/ipv4/tcpao.c module of the Linux kernel’s IPv4 protocol implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
DEBIAN-CVE-2024-35867
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocshow Skip sessions that are being teared down status == SESEXITING to avoid UAF...
UBUNTU-CVE-2023-52698
In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot ipv6.disable=1, the calipsoinit - netlblcalipsoopsregister function isn't called, and the netlblcalipsoopsget function always returns NULL. In...
UBUNTU-CVE-2024-27417
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6rtmgetaddr It seems that if userspace provides a correct IFATARGETNETNSID value but no IFAADDRESS and IFALOCAL attributes, inet6rtmgetaddr returns -EINVAL with an elevated "struct net...
Ruijie BCR810W/BCR860 vulnerable to OS command injection
Overview Network router BCR810W/BCR860 provided by Ruijie Networks Co., Ltd. contains an OS command injection vulnerability CVE-2023-3608, CWE-78. Note that this vulnerability can only be exploited when the BCOS port of the product is connected to the Internet. JPCERT/CC has confirmed attacks...
Information Leakage Vulnerabilities in Zhiyuan A6+ Collaboration Management Software and Zhiyuan A8+ Collaboration Management Software of Beijing Zhiyuan Internet Software Co.
Beijing Zhiyuan Internet Software Co., Ltd. is an enterprise integrating product design, R&D, sales and service to provide professional collaborative management software products, solutions, platforms and cloud services, and is a leading provider of collaborative management software in China. Ltd...
Important: Red Hat Security Advisory: bind and dhcp security update
An update for bind is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
D-Link DAR-7000 安全漏洞
D-Link DAR-7000 is an Internet behavior auditing gateway from China Youxun D-Link. A security vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from an incorrect operation of the parameter file can lead to unrestricted uploads...
D-Link DAR-7000-40 resmanage.php Command Injection Vulnerability
DAR-7000-40 is a network device suitable for multiple fields such as government, finance, insurance, hotels, small and medium-sized enterprises, and education industry. It provides professional traffic management capabilities, powerful content auditing, advanced Internet behavior management and...
The vulnerability of the rlb_arp_xmit() function in the drivers/net/bonding/bond_alb.c module of the Linux kernel’s IPSec core, which allows a hacker to trigger a service failure.
The vulnerability of the rlbarpxmit function in the drivers/net/bonding/bondalb.c module of the Linux kernel-based IPSec driver component is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
Apple and Google join forces to stop unwanted tracking
Apple and Google have announced an industry specification for Bluetooth tracking devices which help alert users to unwanted tracking. The specification, called Detecting Unwanted Location Trackers, will make it possible to alert users across both iOS and Android if a device is unknowingly being...
The vulnerability of the ip_tunnel_rcv() function in the net/ipv4/ip_tunnel.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iptunnelrcv function in the net/ipv4/iptunnel.c module of the Linux kernel’s IPv4 protocol implementation is related to improper handling of the network packet header. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
GHSA-2VJQ-HG5W-5GM7 OctoPrint has an Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled
Impact OctoPrint versions up until and including 1.10.0 contain a vulnerability that allows an unauthenticated attacker to completely bypass the authentication if the autologinLocal option is enabled within config.yaml, even if they come from networks that are not configured as localNetworks, by...
CVE-2024-22064
ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...
DNS Tunneling Used for Stealthy Scans and Email Tracking
By Deeba Ahmed Hackers are hiding malicious messages in everyday internet traffic! Learn how DNS tunneling works and how to protect yourself from this sneaky cyberattack. Stop hackers from scanning your network and tracking your clicks. This is a post from HackRead.com Read the original post: DNS...
