Code injection

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed...

CVE-2020-25243

CVE-2020-25243 affects Siemens LOGO! Soft Comfort prior to V8.4. The issue is a zip-slip vulnerability triggered when importing a compromised project file, potentially allowing a local attacker to take over the host system if chained with other vulnerabilities. Affected software is LOGO! Soft Com...

CVE-2020-25244

Siemens LOGO! Soft Comfort is affected by CVE-2020-25244. All versions before V8.4 are vulnerable to DLL hijacking due to insecure library loading, enabling a local attacker to take over the system where the software is installed. Public sources corroborate the issue and Siemens PT Security/Red H...

CVE-2020-25243

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chained with other vulnerabilities this vulnerability could ultimately lead to a system takeover by an...

CVE-2020-25243

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chained with other vulnerabilities this vulnerability could ultimately lead to a system takeover by an...

CVE-2020-25244

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed...

Drupal Releases Security Updates

Drupal has released security updates to address a vulnerability affecting Drupal 7, 8.9, 9.0, and 9.1. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Drupal Advisory SA-CORE-2021-002 and apply the necessary...

Unspecified Vulnerability in Oracle Solaris (CNVD-2021-33839) (CNVD-2021-33839)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Common Desktop Environment component of Oracle Solaris version 10. An attacker could exploit this vulnerability to compromise Oracle Solaris by allowing a low-privileged attacker to log in to the infrastructure...

VMware Releases Security Update

VMware has released a security update to address a vulnerability affecting NSX-T. An attacker can exploit this vulnerability to take control of an affected system CISA encourages users and administrators to review VMSA-2021-0006 and apply the necessary update and workaround. This product is...

Oracle Solaris 安全漏洞

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Common Desktop Environment component of Oracle Solaris version 10. An attacker could exploit this vulnerability to compromise Oracle Solaris by allowing a low-privileged attacker to log in to the infrastructure...

Mozilla Releases Security Update for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Mozilla Security Advisories for Firefox 88...

Siemens LOGO! Soft Comfort 代码问题漏洞

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A security vulnerability exists in Siemens LOGO! A local attacker could exploit this vulnerability to cause a takeover of the system on which the software is installed...

Siemens LOGO! Soft Comfort Path Traversal Vulnerability

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A path traversal vulnerability exists in Siemens LOGO! An attacker could exploit the vulnerability to cause the system to be taken over by the attacker...

Siemens LOGO! Soft Comfort Uncontrolled Search Path Element Vulnerability

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A security vulnerability exists in Siemens LOGO! A local attacker could exploit this vulnerability to cause a takeover of the system on which the software is installed...

Google Chrome Security Update (stable-channel-update-for-desktop_16-2021-02) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Backdoor.Win32.DarkKomet.apbb Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d6c930e0ac1df934151d1890f6441fe2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.DarkKomet.apbb Vulnerability: Insecure Permissions Description: DarkKomet creates an...

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Mozilla Security Advisories for Firefox 85,...

VMware Releases Security Updates for VMware SD-WAN Orchestrator

VMware has released security updates to address multiple vulnerabilities in VMware SD-WAN Orchestrator. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Some of these vulnerabilities have been detected in exploits in the wild. The Cybersecurity and Infrastructure Securi...

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address a vulnerability in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review th...