Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.8.4 bug fix and security update

Red Hat OpenShift Container Platform release 4.8.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a...

The vulnerability of the ARM SIGPAGE function in Linux kernels, which allows attackers to gain access to protected information

The vulnerability of the ARM SIGPAGE function in Linux kernels relates to the possibility of using an uninitialized resource. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable due to a failure to properly access permissions flaw in the shadow page in arch/x86/kvm/mmu/pagingtmpl.h. By sending a build request, a local attacker could exploit this flaw t...

Go-Shellcode - A Repository Of Windows Shellcode Runners And Supporting Utilities

go-shellcode is a repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques. The available Shellcode runners include: CreateFiber CreateProcess CreateProcessWithPipe CreateRemoteThread CreateRemoteThreadNati...

Several Malware Families Targeting IIS Web Servers With Malicious Modules

A systematic analysis of attacks against Microsoft's Internet Information Services IIS servers has revealed as many as 14 malware families, 10 of them newly documented, indicating that the Windows-based web server software continues to be a hotbed for natively developed malware for close to eight...

UVI-2021-1001307 KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow

KVM: PPC: Book3S: Fix HRTAS rets buffer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.136 by commit...

MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2022-05449)

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. Metinfo 6.1.3 version of the existence of cross-site request forgery...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2021-55184)

IBM QRadar SIEM is a solution from IBM America that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. IBM QRadar SIE...

Hutchinson Next-Generation Cloud Desktop Has File Upload Vulnerability

Hutchison Next Generation Desktop is a desktop virtualization product based on NGD Next Generation Desktop architecture. Hutchinson Next Generation Desktop has a file upload vulnerability, which can be exploited by attackers to upload a webshell and gain server privileges...

Unspecified Vulnerability in IBM QRadar SIEM (CNVD-2021-52959)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A security...

ARTIF - An Advanced Real Time Threat Intelligence Framework To Identify Threats And Malicious Web Traffic On The Basis Of IP Reputation And Historical Data.

ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collecting,...

HuCart suffers from SQL injection vulnerability (CNVD-2021-54014)

HuCart is a leading enterprise building system, based on PHP Mysql architecture, can run on Linux, Windows and other various server platforms. HuCart suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Zero Trust: Not As Scary As It Sounds

If the term Zero Trust has been popping up in your news feed with astonishing frequency lately, you may be tempted to think that Zero Trust must be a brand-new technology cooked up in a research lab at MIT and powered by the latest artificial intelligence, machine learning, quantum computing, and...

SQL Injection Vulnerability in Hanvon Face Attendance Management System (CNVD-2021-54093)

Hanvon Face Attendance Management System is a new generation of attendance management system with C/S architecture. SQL injection vulnerability exists in Hanvon Face Attendance Management System, which can be exploited by attackers to obtain sensitive information from the database...

HuCart suffers from SQL injection vulnerability (CNVD-2021-55382)

HuCart is an enterprise building system, based on PHP Mysql architecture, can run on Linux, Windows and other various server platforms, regular environment. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Intel BIOS Shared SW Architecture 授权问题漏洞

Intel BIOS Shared SW Architecture Intel BSSA is a BIOS shared software architecture from Intel Corporation. An authorization issue vulnerability exists in the Intel BIOS Shared SW Architecture due to an elevation of privilege vulnerability in the build time configuration of the Shared SW...

Arbitrary File Deletion Vulnerability in Xiancheng CMS

Xiancheng CMS is a PHP article management system with PHP+Mysql architecture. Xiancheng CMS arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...

Design/Logic Flaw

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to...

CVE-2021-3571

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to...

IBM AIX Input Validation Error Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to an input validation error that allows a local user with higher group privileges to exploit a vulnerability in the lpd daemon. No detailed vulnerability details are...