Supreme Court Limits Scope of Controversial Hacking Law

The United States Supreme Court has ruled that a police officer who received money for obtaining data from a law-enforcement database for an associate did not violate a controversial federal hacking law, marking a victory for the ethical hacking community by limiting the law’s scope. In a landmar...

CVE-2020-7469

In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet...

Influence of technology on gaming industry

By Habiba Rashid With easy access to games and the internet, technology allowed millions around the world to enjoy gaming as a shared interest and activity. This is a post from HackRead.com Read the original post: Influence of technology on gaming industry...

Realtek RTL8710 缓冲区错误漏洞

The Realtek RTL8710 is an IoT microcontroller from Realtek Semiconductor Taiwan, China.The Realtek RTL8710 suffers from a buffer overflow vulnerability that could be exploited by attackers to remotely execute code via the "memcpy" function...

ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network...

[SECURITY] Fedora 33 Update: mapserver-7.4.5-1.fc33

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

[SECURITY] Fedora 34 Update: mapserver-7.6.3-1.fc34

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

PT-2021-8260 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0 Description: The vulnerability is related to a slab-out-of-bounds read in the fib6 nh flush exceptions function in the Linux kernel's IPv6 routing code. This issue can be exploited to cause a denial of...

Fedora: Security Advisory for mapserver (FEDORA-2021-74dadee887)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mapserver (FEDORA-2021-faab70f09a)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Network Policies to Help Reduce Risk and Improve Security

Cloud workloads frequently require internet access, and as we know, anything accessing the internet can be breached. This article explores simple tactics such as access level restriction and overlaying threat intelligence to enhance your security posture...

Is It Time to Consider Replacing Your CDN?

Content delivery networks CDNs are the pipelines of the Internet. Working behind the scenes, they are reshaping how information is consumed online, accelerating web traffic, enhancing user experience, and providing every website with the ability to truly go global. As you may imagine, any...

USN-4975-1 python-django vulnerabilities

It was discovered that the Django URLValidator function incorrectly handled newlines and tabs. A remote attacker could possibly use this issue to perform a header injection attack. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. CVE-2021-32052 Rasmus Lerchedahl Petersen...

Weak Password Vulnerability in Shengxinta Internet Behavior Management

Shenzhen Xinta Technology Co., Ltd. is a security technology company that specializes in product development. Shengxinta Internet Behavior Management has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in BDCOM Internet Behavior Management and Audit System

Shanghai Boda Data Communication Co., Ltd. is a high-tech enterprise integrating R&D, production and sales. BDCOM Internet Behavior Management and Audit System suffers from a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Shengxinta Internet Behavior Management

Shenzhen Xinta Technology Co., Ltd. is a security technology company that specializes in product development. A command execution vulnerability exists in Shengxinta Internet Behavior Management, which can be exploited by an attacker to gain control of a server...

The vulnerability of the GSS-TSIG component of the BIND server, related to writing beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the GSS-TSIG component of the BIND server is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request...

CHIYU Technology BF-630W 跨站脚本漏洞

The Chiyu CHIYU BF-430 and others are a networking server that provides communication for access control, time and attendance systems and other devices from China's Taiwan-based Chiyu Technology Chiyu. The cross-site scripting vulnerability exists in multiple CHIYU products, which stems from an...

CHIYU BF-630W 跨站脚本漏洞

BF-630W is a web-based fingerprint-secured single-door biometric reader controller from CHIYU Technology CHIYU Technology suffers from a cross-site scripting vulnerability that stems from an unauthenticated XSS vulnerability in several CHIYU Technology IoT devices, including BF-630, BF-450M,...

PT-2021-6022 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.3 Description: The issue is related to the implementation of the IPv6 protocol in the Linux kernel, which contains defects and risks associated with the use of certain cryptographic algorithms. This can lea...