OpenEMR 5.0.2.1 - Remote Code Execution

Exploit Title: OpenEMR 5.0.2.1 - Remote Code Execution Exploit Author: Hato0, BvThTrd Date: 2020-08-07 Vendor Homepage: https://www.open-emr.org/ Software Link: https://sourceforge.net/projects/openemr/files/OpenEMR%20Current/5.0.2.1/openemr-5.0.2.tar.gz/download Version: 5.0.2.1 without patches...

Weak password vulnerability in AC centralized management platform of China Construction Zhiyun Network Communications Co.

CCTC Zhiyun Network Communications Co., Ltd. is a service provider specializing in the research and development, production, sales and service of network communications equipment, and providing network security, routers, switches, firewalls, wireless AP coverage and other network products and...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1248-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed multiple bugs in NFC subsytem bsc1178181. CVE-2020-36311: Fixed a denial of service so...

Weak password vulnerability in Tianyue Network Security Audit System V6.0

Tianyue Network Security Audit System Business Network Audit, referred to as Tianyue Audit System, is a compliance management system that conducts fine-grained audits of network operation behaviors in business environments. A weak password vulnerability exists in Tianyue Network Security Audit...

Weak Password Vulnerability in RG-ISG of Ruijie Networks Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A weak password vulnerability exists in the RG-ISG of Ruijie Networks Corporation,...

Debian DLA-2629-1 : libebml security update

A heap overflow issue was detected in libebml, a library to read and write files in the EBML format, a binary pendant to XML. These issues appeared in several ReadData functions of various data type classes. This update also fixes the issue in EbmlString::ReadData and EbmlUnicodeString::ReadData,...

Unauthorized Access Vulnerability in North Cyberdyne Antivirus System

Beixinyuan Anti-Virus System hereinafter referred to as "Beixinyuan Anti-Virus" is an enterprise-level network anti-virus system independently developed by Beijing Beixinyuan Software Co. The Beixinyuan Anti-Virus System has an unauthorized access vulnerability that can be exploited by attackers ...

Fedora 32 : python39 (2021-a311bf10d4)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a311bf10d4 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...

Google Chrome Network Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.72. An attacker can exploit this vulnerability to bypass security restrictions...

Chromium: CVE-2021-21210 Inappropriate implementation in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Weak Password Vulnerability in Lenovo.com Security Gateway

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and was formerly known as the Information Security Division of Lenovo Group. Its main business covers network border security protection, application and data security protection, and...

EulerOS Virtualization 2.9.1 : PyYAML (EulerOS-SA-2021-1723)

According to the version of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when...

EulerOS Virtualization 2.9.1 : nss (EulerOS-SA-2021-1717)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed...

EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2021-1740)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial...

EulerOS Virtualization 2.9.1 : glib2 (EulerOS-SA-2021-1712)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path...

The FBI Is Now Securing Networks Without Their Owners’ Permission

In January, we learned about a Chinese espionage campaign that exploited four zero-days in Microsoft Exchange. One of the characteristics of the campaign, in the later days when the Chinese probably realized that the vulnerabilities would soon be fixed, was to install a web shell in compromised...

SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2021:1168-1)

This update for opensc fixes the following issues : CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decodebitstring bsc1149746. CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 CVE-2019-19479: Fixed an incorrect read...

Weak Password Vulnerability in ER3200G2 System Management

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technical services, technical consulting, transfer of achievements, production, sales: electronic products, software, data communication equipment, broadband access equipment, network security equipment,...

Secure unmanaged devices with Microsoft Defender for Endpoint now

As we have entered into new hybrid work environments, businesses need to think about how they will proactively protect their organizations from the influx of new or “bring your own” BYO connected devices. This new normal has exposed the most challenging cybersecurity landscape we’ve ever...

Secure unmanaged devices with Microsoft Defender for Endpoint now

As we have entered into new hybrid work environments, businesses need to think about how they will proactively protect their organizations from the influx of new or “bring your own” BYO connected devices. This new normal has exposed the most challenging cybersecurity landscape we’ve ever...