RHSA-2023:7112 Red Hat Security Advisory: shadow-utils security and bug fix update

Bulletin has no description...

RHSA-2023:6632 Red Hat Security Advisory: shadow-utils security and bug fix update

Bulletin has no description...

RHSA-2007:0431 Red Hat Security Advisory: shadow-utils security and bug fix update

Bulletin has no description...

The vulnerability of the Shadow account management tool lies in the insufficient neutralization of certain elements in the query, allowing a malicious actor to compromise data integrity.

The vulnerability of the Shadow account management tool is related to insufficient neutralization of certain elements in the query. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of the Shadow Mode component of the cross-platform Xen hypervisor in Linux operating systems arises from insufficient validation of input data, allowing attackers to exploit their privileges.

The vulnerability of the Shadow Mode component of the cross-platform hypervisor Xen in the Linux operating system is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Bulletin: Vulnerability in shadow-utils library (CVE-2023-4641) affects Power HMC.

Summary The shadow-utils library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-4641 DESCRIPTION: shadow-maint shadow-utils could allow a local authenticated attacker to obtain sensitive information, caused by failing t...

Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

Shadow apps, a segment of Shadow IT, are SaaS applications purchased without the knowledge of the security team. While these applications may be legitimate, they operate within the blind spots of the corporate security team and expose the company to attackers. Shadow apps may include instances of...

Fedora: Security Advisory (FEDORA-2023-35d2ad2328)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-589189d414)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wing Security SaaS Pulse: Continuous Security & Actionable Insights — For Free

Designed to be more than a one-time assessment— Wing Security's SaaS Pulse provides organizations with actionable insights and continuous oversight into their SaaS security posture—and it's free! Introducing SaaS Pulse: Free Continuous SaaS Risk Management Just like waiting for a medical issue to...

QNAP NAS/NVR Administrator Hash Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'QNAP NAS/NVR Administrator Hash Disclosure', 'Description' = %q This module exploits combined heap and stack buffer overflows for QNAP NAS and NV...

It's Time To Untangle the SaaS Ball of Yarn

It's no great revelation to say that SaaS applications have changed the way we operate, both in our personal and professional lives. We routinely rely on cloud-based and remote applications to conduct our basic functions, with the result that the only true perimeter of our networks has become the...

openSUSE Security Advisory (SUSE-SU-2024:2658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-42639

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42639

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42637

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42637

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

H3C Magic B1ST 安全漏洞

The H3C Magic B1ST is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic B1ST v100R012 version, which stems from a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...