GSD-2022-1005860 KVM: Don't set Accessed/Dirty bits for ZERO_PAGE

KVM: Don't set Accessed/Dirty bits for ZEROPAGE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005605 KVM: Don't set Accessed/Dirty bits for ZERO_PAGE

KVM: Don't set Accessed/Dirty bits for ZEROPAGE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33863 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns the KVM and the handling of Accessed/Dirty bits for the ZERO PAGE. The actual impact and potential for attack have not been proven yet. Recommendations: For versions prio...

PT-2022-34118 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns the KVM and the handling of Accessed/Dirty bits for ZERO PAGE. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33517 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the KVM in the Linux Kernel, where the Accessed/Dirty bits are not set for the ZERO PAGE. The actual impact and attack plausibility of this issue have not yet been proven...

CVE-2021-20121

The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and...

CVE-2021-29777

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticated user to cause a denial of srevice IBM X-Force ID: 203031...

CVE-2020-11685

In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS...

Stored passwords in 'Saved Logins' can be copied without master password entry — Mozilla

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

Hacker Stole Data of Over 70% Bulgarian Citizens from Tax Agency Servers

Eastern European country Bulgaria has suffered the biggest data breach in its history that compromised personal and financial information of 5 million adult citizens out of its total population of 7 million people. According to multiple sources in local Bulgarian media, an unknown hacker earlier...

Rockwell Automation 1790 16 Output 1790-0V16X/0B16X Adapter I/O Accessed Via Proxy

Binary data 754533.prm...

30 Million Facebook Accounts Were Hacked: Check If You're One of Them

Late last month Facebook announced its worst-ever security breach that allowed an unknown group of hackers to steal secret access tokens for millions of accounts by taking advantage of a flaw in the 'View As' feature. At the time of the initial disclosure, Facebook estimated that the number of...

FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-15548)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the visitors.php file in FineCMS 2017-07-12 and earlier versions, which stems from the program's failure to restrict JavaScript in accessed URLs.A...

Internet Explorer cross-domain policy bypass

Overview Internet Explorer contains a flaw that may allow an attacker to bypass cross-domain policies. Yosuke HASEGAWA of Secure Sky Technology Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When a...

CVE-2016-0596

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML...

MantisBT XmlImportExport Plugin PHP Code Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability', 'Description' = %q This module exploits a post-auth vulnerability...

Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22664/info Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker may leverage this issue to gain access to potentially sensitive information about user permissions and accessed files...

SuSE 11.3 Security Update : Linux kernel (SAT Patch Numbers 7991 / 7992 / 7994)

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to 3.0.82 and to fix various bugs and security issues. The following security issues have been fixed : - The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel allowed local users to cause a denial of service NUL...

Sega Pass customer datails hacked, LulzSec wants to Help Sega !

Sega Pass customer datails hacked, LulzSec wants to Help Sega ! Sega has told gamers that some of their personal information may have been stolen following an attack on its systems. E-mail addresses and dates of birth stored on the Sega Pass database were accessed by hackers. But payment...

Romania police Arrest 42 Business VOIP Cyber Crime Hacker !

Police in Romania of late raided a hacking gang that was centered on hijacking Business VoIP information from illegally accessed servers. Police in Romania of late raided a hacking gang that was centered on hijacking Business VoIP information from illegally accessed servers. ThinkBright.net...