16001 matches found
Remote code execution
Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to...
CVE-2021-38125
CVE-2021-38125 affects Micro Focus Operations Bridge containerized. The vulnerability allows unauthenticated remote code execution in versions 2021.05, 2021.08, and newer containerized deployments if upgraded from 2021.05 or 2021.08. The connected documents do not provide the root cause details, ...
CVE-2021-38125
Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to...
A week in security (April 4 – 10)
Last week on Malwarebytes Labs: Why data protection and privacy are not the same, and why that matters: Lock and Code S03E09 YouTube channels of Taylor Swift, Justin Bieber, Harry Styles, and other musicians compromised Successful operations against Russian Sandworm and Strontium groups targeting...
Microsoft's New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date
Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022. "This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional cost," said Lior Bela, senior...
Micro Focus Operations Bridge Manager 安全漏洞
Micro Focus Operations Bridge Manager is a software application from Micro Focus UK. It provides a monitoring function. A security vulnerability exists in Micro Focus Operations Bridge containerized, which can be exploited by unauthenticated attackers to conduct remote code execution...
Security Bulletin: Operations Dashboard is vulnerable to Go CVE-2022-24921
Summary Operations Dashboard is vulnerable to Go CVE-2022-24921 with details below Vulnerability Details CVEID: CVE-2022-24921 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validation. By using a specially-crafted deeply nested expression, a remote attacker...
Security Bulletin: Operations Dashboard is vulnerable to Go CVE-2022-23806
Summary Operations Dashboard is vulnerable to Go CVE-2022-23806 with details below Vulnerability Details CVEID: CVE-2022-23806 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw with IsOnCurve function returns true for invalid field elements. By sending a...
Security Bulletin: Operations Dashboard is vulnerable to Go CVE-2022-23772
Summary Operations Dashboard is vulnerable to Go CVE-2022-23772 with details below Vulnerability Details CVEID: CVE-2022-23772 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a buffer overflow in the Rat.SetString function in math/big. By sending a specially-crafted request...
Security Bulletin: Operations Dashboard is vulnerable to Go CVE-2022-23773
Summary Operations Dashboard is vulnerable to Go CVE-2022-23773 with details below Vulnerability Details CVEID: CVE-2022-23773 DESCRIPTION: An unspecified error with not treating branches with semantic-version names as releases in cmd/go in Golang Go has an unknown impact and attack vector. CVSS...
OffensiveNotion - Notion As A Platform For Offensive Operations
Notion yes, the notetaking app as a C2. Wait, What? Yes. But Why? What started as a meme grew into a full project. Just roll with it. Read more! Here's our blog post about it: We Put A C2 In Your Notetaking App: OffensiveNotion Features A full-featured C2 platform built on the Notion notetaking...
ASUS RT-AX56U Stack Buffer Overflow Vulnerability
The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. The ASUS RT-AX56U suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code, perform arbitrary operations, or interrupt services...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.
Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable when operations occur outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Radare2 Buffer Overflow Vulnerability (CNVD-2022-81362)
Radare2 is a set of libraries and tools for working with binary files. Radare2 is vulnerable to a buffer overflow vulnerability that originates in libr/bin/format/ne/ne.c when executing operations on memory that do not properly validate data boundaries. An attacker could exploit this vulnerabilit...
ASUS RT-AC56U Heap Buffer Overflow Vulnerability
The ASUS RT-AC56U is a dual-band Wi-Fi router from ASUS China. A security vulnerability exists in the ASUS RT-AC56U, which originates from an insufficient validation of the decryption parameter length, and allows an attacker to execute arbitrary code, arbitrary operations, and interrupt services...
Radare2 Buffer Overflow Vulnerability (CNVD-2022-81363)
Radare2 is a set of libraries and tools for working with binary files. Radare2 5.6.6 and earlier versions are vulnerable to a buffer overflow vulnerability that originates in libr/bin/format/mach0/mach0.c when performing operations on memory that do not properly validate data boundaries. An...
CVE-2022-25596
ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...
Heap overflow
ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...
WordPress Library File Manager plugin跨站请求伪造漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Library File Manager plugin has a cross-site request forgery vulnerability, which stems from the fact that the plugin uses a...
