38686 matches found
CVE-2021-29662
The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...
Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-29418
The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This in some situations allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for...
ACRN Null Pointer Dereference Vulnerability
ACRN is an open source virtual machine monitor for the Internet of Things. ACRN suffers from a security vulnerability that stems from devicemodel/hw/pci/virtio/virtio.c null pointer dereference. No details of the vulnerability are provided at this time...
The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software lies in the fact that the output operation goes beyond the buffer in memory, allowing an intruder to gain unauthorized access to the protected information.
The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a speciall...
(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the iSCSI subsystem in Linux operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data through specially created Netlink messages...
File Upload Vulnerability in Xi'an Ice Network Technology Co.
Xi'an Ice and Snow Network Technology Co., Ltd. was established on 07/07/2014. Legal representative Gai Bing, the company's scope of business includes: web design, computer system design, computer technical services and technical consulting; Internet information services, computer hardware and...
CVE-2021-29424
The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...
CVE-2021-21727
A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...
Why you need to trust your VPN: Lock and Code S02E05
This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we speak to Malwarebytes senior security researcher JP Taggart about the importance of trusting your VPN. Youve likely heard the benefits of using a VPN: You can watch TV shows restricted ...
TP-Link Archer A7 安全漏洞
Tp-link TP-Link Archer A7 is a wireless router from China P&L Tp-link. A security vulnerability exists in the TP-Link Archer A7 prior to Archer C7USV5210125 and Archer A7USV5200220 AC1750 routers, which stems from a failure to properly filter IPv6 SSH connections. An attacker could exploit the...
ZTE ZXHN F623 安全漏洞
The ZTE ZXHN F623 is a wireless router from ZTE China. It is used to provide Internet access. A security vulnerability exists in the ZTE ZXHN F623, which can be exploited by an attacker to amplify traffic by sending a well-constructed IPv6 message to the affected device, ultimately resulting in a...
Hacking Weapons Systems
Lukasz Olejnik has a good essay on hacking weapons systems. Basically, there is no reason to believe that software in weapons systems is any more vulnerability free than any other software. So now the question is whether the software can be accessed over the Internet. Increasingly, it is. This is...
Smogcloud - Find Cloud Assets That No One Wants Exposed
Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic and ephemeral...
CVE-2021-25366
Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication...
CVE-2021-25354
Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink...
CVE-2021-25366
Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication...
CVE-2021-25354
Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink...
