Qualys Response to Rapid7’s False Claims on VMDR

As remote working is becoming the need of the hour, IT and Security teams are working tirelessly to ensure continuity of services and deliver on all aspects of the business. To help our customers in these challenging times, we launched a 60-day no-cost ‘Remote Endpoint Protection’ service for...

CVE-2020-11725

A flaw was found in the Linux kernel. The Advanced Linux Sound Architecture subsystem's sndctlelemadd mishandles the privatesizecount multiplication when the addition of audio control elements happen leading to a denial of service...

TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution Exploit

This Metasploit module exploits a command injection vulnerability in the tdpServer daemon /usr/bin/tdpServer, running on the router TP-Link Archer A7/C7 AC1750, hardware version 5, MIPS Architecture, firmware version 190726. The vulnerability can only be exploited by an attacker on the LAN side o...

Updated golang packages fix security vulnerability

Updated golang packages fix security vulnerability: An integer overflow vulnerability was found in the Go crypto/x509 and golang.org/x/crypto/cryptobyte libraries on 32-bit architectures. A remote attacker could exploit this by supplying a crafted x.509 certificate, or other ASN.1 structure, as...

EulerOS 2.0 SP3 : glibc (EulerOS-SA-2020-1388)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by...

TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution', 'Description' = %q This module exploits a command injection...

DEBIAN-CVE-2020-11739

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don't contain a memory barrier. On Arm, this means a processor is allowed to...

UBUNTU-CVE-2020-10702

A flaw was found in QEMU in the implementation of the Pointer Authentication PAuth support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the Xen hypervisor implementation when using the Intel Itanium architecture, allowing guests to enter an unsupported state. An unprivileged guest user could trigger this flaw by setting the BE Big Endia...

Information Leakage

The kernel packages is vulnerable to an information leakage. A flaw was found in the printfatalsignal implementation in the Linux kernel. When "/proc/sys/kernel/print-fatal-signals" is set to 1 the default value is 0, memory that is reachable by the kernel could be leaked to user-space. This issu...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. On AMD64 architectures, the possibility of a kernel crash was discovered by testing the Linux kernel process-trace ability. This could allow a local unprivileged user to cause a denial of service kernel crash...

Information Disclosure

The kernel is vulnerable to information disclosure. a flaw in the hypervisor for hosts running on Itanium architectures allowed an Intel VTi domain to read arbitrary physical memory from other Intel VTi domains, which could make information available to unauthorized users...

Unique P2P Architecture Gives DDG Botnet 'Unstoppable' Status

The coin-mining botnet known as DDG has seen a flurry of activity since the beginning of the year, releasing 16 different updates over the course of the past three months. Most notably, its operators have adopted a proprietary peer-to-peer P2P mechanism that has turned the DDG into a highly...

CVE-2020-1617

CVE-2020-1617 affects Junos OS on non-AFI/AFT platforms. An improper memory initialization in the packet forwarding architecture can be triggered when a genuine packet is inspected by sFlow through a specific firewall policer, causing a reboot and, after reboot, a core file and another reboot on ...

GE CIMPLICITY Elevation of Privilege Vulnerability

GE CIMPLICITY is a client/server based HMI/SCADA solution from General Electric GE. The solution is capable of capturing and sharing real-time and historical data across all levels of the enterprise, enabling operational visualization of processes, equipment, and resource monitoring. An elevation...

PT-2020-4127

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.4R2-S9, 17.4R3 on PTX1000 and PTX10000 Series, QFX10000 Series Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S9 on PTX1000 and PTX10000 Series, QFX10000 Series Juniper Networks Junos OS...

SQL Injection Vulnerability in RuvarOA Collaboration Office System of Guangzhou Luhua Computer Co.

Luvar RuvarOA collaborative office system adopts three-tier structure model, the system development adopts java technology, the database supports Mysql, SQL Server, Oracle and so on. There is a SQL injection vulnerability in the RuvarOA system of Guangzhou Luhua Computer Co., Ltd, which can be...

What the NIST Zero Trust Architecture Means for Business Continuity

In September 2019, NIST National Institute of Standards and Technology published the first draft of its Zero Trust Architecture ZTA for public feedback. A second draft was issued in February 2020 that incorporated industry feedback from the first cycle and solicited more comments. The document is...

Denial Of Service (DoS)

The kernel is vulnerable to denial of service in arch/powerpc/kernel/signal32.c and arch/powerpc/kernel/signal64.c via sigreturn system call...

Design/Logic Flaw

Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/happyaxis.jsp. An attacker could use this vulnerability to learn more about the environment the application is running in. This issue has been...