RSA Archer 安全漏洞

RSA Archer is an enterprise IT governance and compliance governance product from RSA UK, including policy, risk and compliance definition and management. It is able to aggregate all our enterprise assets, as well as some of the monitored information all together, organized on top of a unified...

GitLab 安全漏洞

GitLab is an open source end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, etc. GitLab CE/EE versions 11.3 and later are vulnerable to an information disclosure vulnerability...

PT-2022-9812

Name of the Vulnerable Software and Affected Versions GE UR firmware versions prior to 8.1x Description The web server task in the affected firmware does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series o...

Bypass Restriction

HashiCorp Nomad and Nomad Enterprise with the QEMU task driver enabled is vulnerable to bypass restriction. It allows authenticated users with job submission capabilities to bypass the configured allowed image paths...

Security fix for the ALT Linux 9 package glpi version 9.5.7-alt1

9.5.7-alt1 built March 21, 2022 Pavel Zilke in task 296878 Jan. 27, 2022 Pavel Zilke - New version 9.5.7 - This is a security release, upgrading is recommended - Security fixes: + CVE-2022-21720 : SQL injection using custom CSS administration form + CVE-2022-21719 : Reflected XSS using reload but...

Microsoft Task Scheduler Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations...

An Inside Look at CISA’s Supply Chain Task Force

When one mentions supply chains these days, we tend to think of microchips from China causing delays in automobile manufacturing or toilet paper disappearing from store shelves. Sure, there are some chips in the communications infrastructure, but the cyber supply chain is mostly about virtual...

Mustang Panda targets European diplomats using enhanced PlugX backdoor

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Mustang Panda, a Chinese cyberespionage group, has been targeting European diplomats with a revised version of the PlugX backdoor in an ongoing campaign linked to the ongoing conflict in Ukraine. The group, also known as...

Task Manager Component Google Chrome Bypass

The vulnerability of the Task Manager component in Google Chrome relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

Scale-Out Backup Repository Offload task fails with "There is not enough space on the disk"

Article Applicability This KB Article is specific to an issue where a SOBR Offload task fails with an error reporting that "There is not enough space on the disk " and the path specified in the error contains 'VeeamBackupTemp '. Challenge Scale-Out Backup Repository's Offload task fails with erro...

StayKit - Cobalt Strike Kit For Persistence

StayKit is an extension for Cobalt Strike persistence by leveraging the executeassembly function with the SharpStay .NET assembly. The aggressor script handles payload creation by reading the template files for a specific execution type. IMPORTANT: To use the script a user will only need to load...

PT-2022-28665

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a use-after-free condition for aborted SSP/STP sas task in the scsi: pm8001 driver. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-28726

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue concerns accessing NULL pt regs in the bpf get task stack function. It was introduced in version v5.9 and fixed in Linux Kernel version v5.16.5. The actual impact and attack...

PT-2022-28813

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.4 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a use-after-free condition in the pm8001 scsi driver for aborted SSP/STP sas task. The actual impact and attack plausibility have not yet been proven. Recommendations...

KDE KCron 权限许可和访问控制问题漏洞

KDE KCron is a task scheduler. KDE Kcron is vulnerable to privilege permission and access control issues, which could be exploited by an attacker to run unauthorized commands...

PT-2022-7503

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.10.0 Description The vulnerability is related to the KVM Kernel-based Virtual Machine component of the Linux kernel, specifically in the x86/mmu Memory Management Unit module. The issue arises from the async pagefault...