364 matches found
Design/Logic Flaw
Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDA...
CVE-2021-32966
The CVE-2021-32966 issue affects Philips Interoperability Solution XDS (versions 2.5–3.11 and 2018-1–2021-1). It describes clear text transmission of sensitive information when LDAP is used over TLS and the LDAP domain controller returns referrals, potentially allowing an attacker to remotely rea...
CVE-2021-32966 Philips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information
Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDA...
CVE-2021-32966 Philips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information
Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDA...
Cesanta MJS has an unspecified vulnerability (CNVD-2022-77023)
Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...
Forcing WhatsApp and iMessage to Work Together Is Doomed to Fail
Europe’s Digital Markets Act requires interoperability between popular messaging apps. But experts warn encryption could be compromised...
DEBIAN-CVE-2021-44142
The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...
[SECURITY] Fedora 34 Update: samba-4.14.12-0.fc34
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
[SECURITY] Fedora 35 Update: samba-4.15.5-0.fc35
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
Cesanta MJS 安全漏洞
Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...
7Rapid Questions: Stephen Donnelly
At Rapid7, there's no shortage of passionate leaders looking to challenge convention and make an impact. Our "7Rapid Questions" series is a way to highlight some of the amazing work taking place behind the scenes, and the exciting growth opportunities available in our global offices. For this...
IsContract Function Usage
Handle defsec Vulnerability details Impact the isContract function that uses EXTCODESIZE was discovered to be hackable. The function will return false if it is invoked from a contract's constructor because the contract has not been deployed yet. The code should be used very carefully, if at all, ...
[SECURITY] Fedora 34 Update: samba-4.14.10-2.fc34
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
[SECURITY] Fedora 35 Update: samba-4.15.2-3.fc35
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
Samba permission permission and access control issue vulnerability (CNVD-2022-15498)
Samba is the standard Windows interoperability suite for Linux and Unix. Samba suffers from a permission permission and access control issue vulnerability that stems from multiple flaws found in the way samba AD DC implements access and consistency checks for stored data. An attacker could exploi...
Samba Resource Management Error Vulnerability
Samba is the standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to a resource management error, and no details of the vulnerability are currently available...
Virtuozzo Hybrid Infrastructure 4.7
In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help expand their services. The improvements cover compute services, object storage, core storage, monitoring, high availability for the management node,...
Microsoft’s 5 guiding principles for decentralized identities
Three years ago, as part of Microsoft’s mission to empower people and organizations to achieve more, we announced that we were incubating a new set of decentralized identity technologies based on a simple vision: Each of us needs a digital identity we own, one which securely and privately stores...
Thief pulls off colossal, $600m crypto-robbery …and gives the money back
The largest crypto-robbery in history is rapidly turning into the most bizarre as well. Lets start at the beginning… In an apparent scream for mercy, 21 hours ago the Poly Network Team reached out via Twitter to “hackers” that had managed to transfer roughly $600 million in digital tokens out of...
