CVE-2021-24148: Improper Authentication

A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address...

PT-2021-15694

Name of the Vulnerable Software and Affected Versions: MStore API WordPress plugin versions prior to 3.2.0 Description: A business logic issue in the MStore API WordPress plugin allows for an authentication bypass with Sign In With Apple. This issue enables unauthenticated users to recover an...

GHSA-5Q6M-3H65-W53X react-dev-utils OS Command Injection in function `getProcessForPort`

react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts in Create React App projects, where the usage is safe. Only when this function is manually invok...

PT-2021-28137

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the functions ZSTD createDDict advanced, ZSTD createDDict, and blosc run decompression with context...

PT-2021-28136

Name of the Vulnerable Software and Affected Versions blosc affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the blosc d function, specifically in the do job and blosc run decompression with context functions. Recommendations A...

PT-2021-28112

Name of the Vulnerable Software and Affected Versions blosc affected versions not specified Description The issue is related to a crash caused by an unknown read. Technical details about the crash include the function names blosc d, do job, and blosc run decompression with context. Recommendation...

Threat Source newsletter (Feb. 18, 2021)

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. Whether you want to read Talos’ research or listen to it, we’ve got plenty of options for you this week. Beers with Talos hit its 100th episode last week. To celebrate, we brought Nigel back out of retirement to update us on the...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...

PT-2021-18550

Name of the Vulnerable Software and Affected Versions telemetry crate versions through 0.1.2 telemetry crate versions through 2021-02-17 Description An issue was discovered in the telemetry crate where there is a drop of uninitialized memory if a value.clone call panics within misc::vec with size...

CVE-2021-22267

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP L and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through...

CVE-2020-26192: Missing Authentication for Critical Function

Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH may potentially exploit this vulnerability to read arbitrary data, tamper with system software or deny service to users. Note: no...

PT-2021-11220

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.2.0 through 9.1.0 Description: The issue allows a non-admin user with either ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH privileges to potentially exploit it and read arbitrary data, tamper with system...

PT-2021-28059

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to ...

JetBrains Code With Me Encryption Issue Vulnerability

JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. JetBrains Code With Me suffers from a cryptographic issue vulnerability that can be exploited by an attacker on the local network to access encrypted traffic knowin...

PT-2021-28043

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about exploitation include the function names blosc run decompression with context and blosc2 decompress. The crash occur...

CVE-2021-25755

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

CVE-2021-25755

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

Code injection

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

CVE-2021-25755

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

CVE-2021-25755

Affected software : JetBrains Code With Me (plugin for IntelliJ IDE). Issue : cryptographic/traffic protection vulnerability where an attacker on the local network, knowing a session ID, could access encrypted traffic. Root cause / details : multiple sources (NVD, Red Hat, CNVD, CVE records) cons...