PT-2021-2154 · Microsoft · Visual Studio +1

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to execute...

SharpEDRChecker - Checks Running Processes, Process Metadata, DLLs Loaded Into Your Current Process And The Each DLLs Metadata, Common Inst all Directories, Installed Services And Each Service Binaries Metadata, Installed Drivers And Each Drivers Metadata, All For The Presence Of Known Defensive Products Such As AV's, EDR's And Logging Tools

New and improved C Implementation of Invoke-EDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for...

CVE-2021-3285

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...

CVE-2021-3285

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...

CVE-2021-3285

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...

Design/Logic Flaw

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...

State-Sponsored Threat Actors Target Security Researchers

This blog was co-authored by Caitlin Condon, VRM Security Research Manager, and Bob Rudis, Senior Director and Chief Security Data Scientist. On Monday, Jan. 25, 2021, Google’s Threat Analysis Group TAG published a blog on a widespread social engineering campaign that targeted security researcher...

North Korea Targets Security Researchers in Elaborate 0-Day Campaign

Hackers linked to North Korea are targeting security researchers with an elaborate social-engineering campaign that sets up trusted relationships with them — and then infects their organizations’ systems with custom backdoor malware. That’s according to Google’s Threat Analysis Group TAG, which...

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software allows a hacker to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software environment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

TI Code Composer Studio IDE Trust Management Issue Vulnerability

TI Code Composer Studio IDE is a Texas Instruments TI integrated development environment that supports TI's microcontroller and embedded processor products. The software includes a complete set of tools for developing and debugging embedded applications. It includes a C/C++ compiler for...

openSUSE Security Update : blosc (openSUSE-2020-2337)

This update for blosc fixes the following issues : Update to version 1.20.1 boo1179914 CVE-2020-29367 : - More saftey checks have been implemented so that potential flaws discovered by new fuzzers in OSS-Fuzzer are fixed now - BloscLZ updated to 2.3.0. Expect better compression ratios for faster...

ATMMalScan - Tool for Windows which helps to search for malware traces on an ATM during the DFIR process

ATMMalScan is a commandline tool for Windows operating systems version 7 and higher, which helps to search for malware traces on an ATM during the DFIR process. This tool examines the running processes of a system, as well as the hard disk, depending on the specified file path. To scan a system, ...

CVE-2021-3285

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...

CVE-2021-3285

The CVE-2021-3285 entry affects TI Code Composer Studio IDE (versions 8.x–10.x) where jxbrowser fails to verify X.509 certificates for HTTPS. Root cause: the affected jxbrowser component in CCS does not perform proper validation of server certificates, enabling potential man-in-the-middle if an a...

Fedora 33 : dotnet3.1 (2021-fb078913dd)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-fb078913dd advisory. - ASP.NET Core and Visual Studio Denial of Service Vulnerability CVE-2021-1723 Note that Nessus has not tested for this issue but has instead relied only on...

Fedora 32 : dotnet3.1 (2021-77a4202036)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-77a4202036 advisory. - ASP.NET Core and Visual Studio Denial of Service Vulnerability CVE-2021-1723 Note that Nessus has not tested for this issue but has instead relied only on...

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software allows a hacker to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software environment is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

Oracle Linux 8 : dotnet5.0 (ELSA-2021-0094)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0094 advisory. 5.0.102-2.0.1 - Add support for new Oracle release 5.0.102-2 - Rebuild with updated tests - Resolves: RHBZ1912684 5.0.102-1 - Update to .NET SDK 5.0.102 and...

Oracle Linux 8 : dotnet3.1 (ELSA-2021-0095)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0095 advisory. 3.1.111-1.0.1 - Update patch to support 8.3 [email protected] - support OL release scheme [email protected] 3.1.111-1 - Update to .NET...