Constructor.Win32.SMWG.c Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/47e819a6ce3d5e93819f4842cfbe23d6.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Constructor.Win32.SMWG.c Vulnerability: Insecure Permissions Description: Description: SMWG - P2P...

CVE-2020-26829

SAP NetWeaver AS JAVA P2P Cluster Communication, versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. ...

CVE-2020-26829

SAP NetWeaver AS JAVA P2P Cluster Communication, versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. ...

Authentication flaw

SAP NetWeaver AS JAVA P2P Cluster Communication, versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. ...

CVE-2020-26829

SAP NetWeaver AS JAVA P2P Cluster Communication (versions 7.11–7.50) is affected by CVE-2020-26829 due to a missing authentication check, enabling an unauthenticated attacker to initiate privileged actions that are normally restricted to administrators, including access to system administration f...

PT-2020-16513

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS JAVA P2P Cluster Communication versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Description The issue allows arbitrary connections from processes outside the cluster and even outside the network segment dedicated for internal clust...

CVE-2020-26829: Missing Authentication for Critical Function

SAP NetWeaver AS JAVA P2P Cluster Communication, versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. ...

OPENSUSE-SU-2020:2053-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issue fixed: - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed: - Enable SAE support jscSLE-14992. - Limit P2PDEVICE name to appropriate ifname size. - Fix wicked wlan...

PT-2020-22126

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash issue was reported, with a crash type of UNKNOWN READ. The crash state includes functions such as wpabuf free, p2p device free, and p2p flush. No...

hostap:p2p: Crash in wpabuf_free

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=5660261972967424 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: p2p Job Type: libfuzzerasanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x020080036223 Crash State: wpabuffree...

RUSTSEC-2020-0067 crate has been renamed to `qp2p`

This crate has been renamed from quic-p2p to qp2p. The new repository location is:...

HEH P2P Botnet Sports Dangerous Wiper Function

A freshly discovered botnet dubbed HEH by researchers is casting a wide net, looking to infect any and all devices that use Telnet on ports 23/2323. It’s particularly destructive: It contains code that wipes all data from infected systems. Perhaps ironically, its operators also have a penchant fo...

ALERT! Hackers targeting IoT devices with a new P2P botnet malware

Cybersecurity researchers have taken the wraps off a new botnet hijacking Internet-connected smart devices in the wild to perform nefarious tasks, mostly DDoS attacks, and illicit cryptocurrency coin mining. Discovered by Qihoo 360's Netlab security team, the HEH Botnet — written in Go language a...

Detect FritzFrog and Other Malware Infections with Inventory Data

Recently, Guardicore researchers discovered a new type of malware called “FritzFrog,” which targets multiple industry verticals, including government, finance, and healthcare. It employs brute-forcing SSH credentials as an initial attack vector, uses a proprietary P2P protocol to efficiently...

FritzFrog Botnet Attacks Millions of SSH Servers

A peer-to-peer P2 botnet called FritzFrog has hopped onto the scene, and researchers said it has been actively breaching SSH servers since January. SSH servers are pieces of software found in routers and IoT devices, among other machines, and they use the secure shell protocol to accept connectio...

A New Fileless P2P Botnet Malware Targeting SSH Servers Worldwide

Cybersecurity researchers today took the wraps off a sophisticated, multi-functional peer-to-peer P2P botnet written in Golang that has been actively targeting SSH servers since January 2020. Called "FritzFrog," the modular, multi-threaded and file-less botnet has breached more than 500 servers t...

CVE-2020-9103

HUAWEI Mate 20 smartphones with 9.0.0.205C00E205R2P1 have a logic error vulnerability. In a special scenario, the system does not properly process. As a result, attackers can perform a series of operations to successfully establish P2P connections that are rejected by the peer end. As a result, t...

Code injection

HUAWEI Mate 20 smartphones with 9.0.0.205C00E205R2P1 have a logic error vulnerability. In a special scenario, the system does not properly process. As a result, attackers can perform a series of operations to successfully establish P2P connections that are rejected by the peer end. As a result, t...

CVE-2020-9103

HUAWEI Mate 20 smartphones with 9.0.0.205C00E205R2P1 have a logic error vulnerability. In a special scenario, the system does not properly process. As a result, attackers can perform a series of operations to successfully establish P2P connections that are rejected by the peer end. As a result, t...

CVE-2020-9103: Undefined Security Weakness

HUAWEI Mate 20 smartphones with 9.0.0.205C00E205R2P1 have a logic error vulnerability. In a special scenario, the system does not properly process. As a result, attackers can perform a series of operations to successfully establish P2P connections that are rejected by the peer end. As a result, t...