2124 matches found
CVE-2021-32699
Wings (Pterodactyl Wings) pre-1.4.4 is affected by a resource-exhaustion vulnerability caused by improper container process limits. A malicious user can exhaust host resources, impacting other clients and potentially taking the physical server offline. Mitigation per multiple sources: upgrade to ...
New malware blocks victims from visiting The Pirate Bay, illegal sites
By Deeba Ahmed Dubbed Vigilante by researchers; the malware prevents the system from those sites that redistribute pirated software/data. This is a post from HackRead.com Read the original post: New malware blocks victims from visiting The Pirate Bay, illegal sites...
Why hackers don’t fly coach
Physical security is relied on too heavily for cabin-based systems on the Airline Information Services Domain AISD. Whilst the Aircraft Control Domain ACD is separated, there are still plenty of interesting information, data and systems that are accessible from the cabin, for those who are prepar...
Dell Hybrid Client Access Control Error Vulnerability
DELL Dell Hybrid Client is an application from Dell, Inc. An access control error vulnerability exists in versions prior to Dell Hybrid Client 1.5, which could be exploited by an attacker to gain root-level access to the system...
Johnson Controls Metasys
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...
Understanding the threat landscape and risks of OT environments
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Chris Sistrunk, Technical Manager in...
Arbitrary File Read Vulnerability in Advantech WebAccess Node
Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech, Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. An arbitrary file read vulnerability exists in Advantech WebAccess Node. An attacker could...
CVE-2020-15180
The CVE-2020-15180 issue is in MariaDB’s mysql-wsrep component, where lack of input sanitization in wsrep_sst_method enables command injection on Galera cluster nodes. Affected are MariaDB releases prior to 10.1.47, 10.2.34, 10.3.25, 10.4.15, and 10.5.6. The risk includes potential unauthorized c...
CVE-2008-2544
Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...
Subrion CMS Remote Code Execution (CVE-2018-19422)
A remote code execution vulnerability exists in Subrion CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rockwell Automation Micro800 and MicroLogix 1400
1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: Micro800, MicroLogix 1400 Vulnerability: Channel Accessible by Non-endpoint 2. RISK EVALUATION Successful exploitation of this vulnerability may result in denial-of-service conditions, which...
CVE-2021-29300
Affected component: @ronomon/opened (Node.js library) prior to version 1.5.2. Root cause: The module is vulnerable to command injection when untrusted input is used to form commands that are executed, enabling an attacker to run arbitrary commands on the host. Impact: Remote code execution risk o...
Denial Of Service (DoS)
Google Chrome is vulnerable to Denial Of Service DoS.It could allow a remote attacker to execute arbitrary code on the system...
Security Bulletin: General Information Vulnerability Affects IBM Control Center (CVE-2021-20529)
Summary IBM Sterling Control Center could allow a user to obtain sensitive version information that could be used in further attacks against the system. Vulnerability Details CVEID: CVE-2021-20529 DESCRIPTION: IBM Sterling Control Center could allow a user to obtain sensitive version information...
ZZCMS Password Reset Vulnerability
ZZCMS is a content management system CMS by Zzcms team in China. A password reset vulnerability exists in zzcms version 201910. The vulnerability stems from The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. An attacker c...
Insecure Temporary File And Folder
openapi-generator-online uses insecure temporary file and folder. The usage of Files.createTempFile to create temporary files and folders allows auto-generated files to be read and modified by any user on the system...
OPENSUSE-SU-2021:0602-1 Security update for sudo
This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 bsc1183936 This update was imported from the SUSE:SLE-15:Update update project...
Path Traversal in Ansible
An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file with...
Eaton Intelligent Power Manager Arbitrary File Deletion Vulnerability (CNVD-2021-31672)
Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...
