Virgin Media Super Hub 3 安全漏洞

Virgin Media O2 Virgin Media Super Hub 3 is the offering smart WiFi from Virgin Media O2 in the UK. The Virgin Media Super Hub 3 suffers from a security vulnerability that stems from the fact that because their SNMP commands do not have adequate protection mechanisms, JavaScript and DNS rebinding...

Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do

After more than 20 years of underwhelming results, security leaders have accepted their intrusion detection system IDS programs as no more than a compliance checkoff. It’s no secret that IDS’s reliance on bi-modal signatures is brittle, easily evaded and often referred to as an “alert cannon.” Ti...

What are computer cookies?

We all know cookies as tasty baked treats that we love to eat, but computer cookies are quite different. Although they’re most popularly known as just "cookies", they may be referred to as browser cookies, Internet cookies, HTTP cookies, web cookies, computer cookies, or digital cookies. What are...

Update now! Google Chrome fixes two in-the-wild zero-days

Google announced on Monday that it will be issuing patches for 11 high severity vulnerabilities found in Chrome, including two that are currently being exploited in the wild. The patch, which is part of the Stable Channel Update for Chrome 93 93.0.4577.82, will be released for Windows, Mac, and...

PT-2021-8991

Name of the Vulnerable Software and Affected Versions Virgin Media Super Hub 3 based on ARRIS TG2492 devices affected versions not specified Description An issue was discovered in the Virgin Media Super Hub 3 devices, where the SNMP commands have insufficient protection mechanisms. This allows fo...

CVE-2021-38617

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation...

Privilege escalation

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation...

CVE-2021-38617: Undefined Security Weakness

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation...

Johnson Controls Sensormatic Electronics Illustra

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls, Inc. Equipment: Illustra Vulnerability: Off-by-one Error 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to...

Edge’s Super Duper Secure Mode benchmarked: How much speed would you trade for security?

In an attempt to make Edge more secure, the Microsoft Vulnerability Research team has started to experiment with disabling Just-In-Time JIT compilation in the browsers V8 JavaScript engine, to create what its calling Super Duper Secure Mode. The reasoning behind this experiment sounds valid. A...

PT-2021-29694

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13 Description A memory leak issue was discovered in the ext4 fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.13,...

PT-2021-29763

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.25 through 5.10.42 Description A memory leak issue was discovered in the ext4 fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.25...

PT-2021-25699

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13 Description: A memory leak issue was discovered in the ext4 fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.1...

PT-2021-25768

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.25 through 5.10.42 Description A memory leak issue was discovered in the ext4 fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.25...

Hardcoded credentials

An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in cominstaller lack the required hardcoded ACL checks for superusers. A default system is not affected cause the default ACL for cominstaller is limited to super users already...

Joomla! 代码问题漏洞

Joomla! is a set of forum components used in the Joomla! content management system. A code issue vulnerability exists in Joomla! 2.5.0 - 3.9.27. The vulnerability stems from a hard-coded ACL check for superuser missing from the install operation in cominstaller, which can be exploited to execute...

Joomla 2.5.x < 3.9.28 Multiple Vulnerabilities (5840-joomla-3-9-28)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.28. It is, therefore, affected by multiple vulnerabilities. - Inadequate escaping in the Rules field of the JForm API leads to a XSS vulnerability. CVE-2021-26035 - Missing...

PT-2021-29361

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns the btrfs filesystem in the Linux Kernel, where debugging asserts have been promoted to full-fledged checks in validate super. The actual impact and attack plausibility hav...

PT-2021-29416

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue concerns the btrfs filesystem in the Linux Kernel, where debugging asserts were promoted to full-fledged checks in validate super. The actual impact and attack plausibility have not...

PT-2021-25499

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: The issue concerns the btrfs filesystem in the Linux Kernel, where debugging asserts were promoted to full-fledged checks in validate super. The actual impact and attack plausibility have n...