Information disclosure

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

Information disclosure

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21792

The CVE-2021-21792 issue affects IOBit Advanced SystemCare Ultimate 14.2.0.220, where the driver mishandles Privileged I/O read requests via IRP_MJ_DEVICE_CONTROL, allowing a local attacker to perform privileged IN reads from the kernel. TALOS-2021-1255 documents a local exploit path where an att...

CVE-2021-21792

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21791

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21790

The CVE-2021-21790 issue affects IOBit Advanced SystemCare Ultimate 14.2.0.220: a flaw in the driver’s handling of Privileged I/O read requests allows a local attacker to trigger privileged reads from the kernel via crafted IRPs, potentially disclosing sensitive kernel data. TALOS details cover C...

CVE-2021-21790

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21790: Exposed IOCTL with Insufficient Access Control

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

PT-2021-14777

Name of the Vulnerable Software and Affected Versions IOBit Advanced SystemCare Ultimate version 14.2.0.220 Description An information disclosure issue exists due to the way the driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in...

PT-2021-14775

Name of the Vulnerable Software and Affected Versions IOBit Advanced SystemCare Ultimate version 14.2.0.220 Description An information disclosure issue exists in the way the driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the...

Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus

An amalgam of multiple state-sponsored threat groups from China may have been behind a string of targeted attacks against Russian federal executive authorities in 2020. The latest research, published by Singapore-headquartered company Group-IB, delves into a piece of computer virus called...

FreeBSD : tomcat -- Remote Denial of Service in multiple versions (cc7c85d9-f30a-11eb-b12b-fc4dd43e2b6a)

rbeaudry reports : A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. Th...

GSD-2021-1001216 ext4: fix possible UAF when remounting r/o a mmp-protected file system

ext4: fix possible UAF when remounting r/o a mmp-protected file system This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...

PT-2021-25736

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue is related to an Oops in the pnfs mark request commit function when doing O DIRECT. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29657

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.13.3 Description The issue is related to an Oops in the pnfs mark request commit function when doing O DIRECT. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25662

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.7 through v5.13.3 Description: The issue is related to an Oops in the pnfs mark request commit function when doing O DIRECT. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2021-29731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue is related to an Oops in the pnfs mark request commit function when doing O DIRECT. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

Virtuozzo Hybrid Infrastructure 4.6 Update 1

This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-45315 The MDS service may be unstable under a high load condition. Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands in the iSCSI kernel module. Vulnerabilit...