41 matches found
CVE-2022-49683 iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client
In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Fix refcount leak in adiaxiadcattachclient ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...
CVE-2024-53096
CVE-2024-53096: Linux kernel patch resolves faulty mmap_region() error path. Key changes move core logic into __mmap_region(), perform upfront validations, and unwind writable/ seal checks earlier. Effects include preallocating iterator state before file-backed hooks, early handling of mapping_ma...
Metasploit Weekly Wrap-Up 05/23/2024
Infiltrate the Broadcast! A new module from Chocapikk allows the user to perform remote code execution on vulnerable versions of streaming platform AVideo 12.4 - 14.2. The multi/http/avideowwbnindexunauthrce module leverages CVE-2024-31819, a vulnerability to PHP Filter Chaining, to gain...
Adi IRC Credential Gatherer
This module searches for credentials stored on AdiIRC Client on a Windows host. Module Options msf use post/windows/gather/credentials/adiirc msf postadiirc show actions ...actions... msf postadiirc set ACTION msf postadiirc show options ...show and set options... msf postadiirc run This module...
adi-artdesign.com Cross Site Scripting vulnerability OBB-1124946
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Why Are Cryptographers Being Denied Entry into the US?
In March, Adi Shamir -- that's the "S" in RSA -- was denied a US visa to attend the RSA Conference. He's Israeli. This month, British citizen Ross Anderson couldn't attend an awards ceremony in DC because of visa issues. You can listen to his recorded acceptance speech. I've heard of two other...
RSA Conference 2019: Cryptographers' Panel Decries Adi Shamir's Visa Issues
SAN FRANCISCO – This year’s RSA Conference Cryptographers’ Panel started on a sour note when it was announced that longtime participant Adi Shamir, one of the inventors of the RSA algorithm, would be absent because of visa issues with the U.S. Department of State. Shamir, who addressed the...
CVE-2018-12959
The CVE-2018-12959 entry concerns the approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token. The description states that this function allows attackers to steal assets (e.g., transfer all contract balances into their account). The connected documents...
adi-mps.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-625066 Description| Value ---|--- Affected Website:| adi-mps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
adi-mps.com XSS vulnerability
Open Bug Bounty ID: OBB-617771 Description| Value ---|--- Affected Website:| adi-mps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
VMSA-2017-0014:VMware NSX-V Edge updates address OSPF Protocol LSA DoS
VMSA-2017-0014 VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0014 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware...
Critical iOS vulnerability in Configuration Profiles pose malware threat
Israeli mobile security start-up Skycure has exposed a vulnerability that could allow hackers to control and spy on iPhones. A major security vulnerability for iOS configuration profiles pose malware threat. The vulnerability affects a file known as mobileconf files, which are used by cell phone...
CVE-2011-0809
Unspecified vulnerability in the Web ADI component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors...
Code injection
Unspecified vulnerability in the Web ADI component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors...
CVE-2011-0809
Oracle E-Business Suite Web ADI component (versions 11.5.10.2, 12.0.6, 12.1.1–12.1.3) has an unspecified vulnerability that can compromise integrity via unknown vectors. The NVD CVE-2011-0809 entry notes network access with partial integrity impact. Red Hat and other records confirm the same issu...
New Attack Against AES-256 a 'Huge Result'
A group of cryptographers has devised a new attack against AES, the de facto standard encryption algorithm, that enables them to recover an encryption key in far less time than had been possible before. The attack can recover an AES-256 key in a small enough amount of time to make the method...
liveboxftp-overflow.txt
Livebox Router vulnerability to REMOTE BUFFER OVERFLOW DoS Discovered by: 0in from DaRk-CodeRs Security & Programming Group! http://dark-coders.4rh.eu DESCRIPTION: Livebox tested on polish "Neostrada TP Livebox" is vulnerability to remote but from local network, because firewall working.. buffer...
Livebox routers format string vulnerability
Format string vulnerability in built-in ADI Convergence Galaxy FTP Server...
ADI Convergence Galaxy FTP Server Password - Remote Denial of Service
// source: https://www.securityfocus.com/bid/28066/info ADI Convergence Galaxy FTP Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to crash the affected application,...
Дырка в Oracle ADI (cleartext passwords)
Пароли содержатся в лог-файле в открытом виде...