Exploit for CVE-2021-38647

cve-2021-38647 https://github.com/corelight/CVE-2021-38647 wit...

Design/Logic Flaw

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

CVE-2021-31786

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

389-ds:1.4 security and bug fix update

1.4.3.16-19 - Bump version to 1.4.3.16-19 - Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin 1.4.3.16-18 - Bump version to 1.4.3.16-18 - Resolve: Bug 1983121 - CRYPT password hash with asterisk allows any bind attempt to succeed...

Cisco Firepower Management Center Software Common Access Card Authentication Bypass (cisco-sa-fmc-cacauthbyp-NCLGZm3Q)

According to its self-reported version, Cisco Firepower Management Center is affected by a vulnerability in the Common Access Card CAC authentication feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass authentication and access the F...

PT-2021-27657

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a dynamic stack buffer overflow, which occurs when writing 16 bytes. The crash involves several functions, including mdb numeric ...

PT-2021-28349

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a dynamic stack buffer overflow. The crash occurs during the execution of specific functions, including mdb...

SQL Injection Scanning Attempt Over HTTP (CVE-2021-24321)

SQL Injection Scanning Attempt Over HTTP...

What is phishing attacks❓ Types and business impact

According to Wikipedia, phishing is a fraudulent attempt to obtain sensitive data by impersonating oneself as a trustworthy entity. Much like any other kind of fraud, the perpetrator is able to cause a significant amount of damage, especially when the threat persists for an extended period...

Malicious Package

Overview string-easy-assistant is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview e39testing is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

OIK Dispetchner NT Authentication Bypass

The vulnerability of the SCADA system of OIK Dispatching is related to deficiencies in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions by using brute-force attacks...

CVE-2021-29648

An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolvedids and resolvedsizes are intentionally uninitialized in the vmlinux BPF Type Format BTF, which can cause a system crash upon an unexpected access attempt in mapcreate in...

CVE-2021-28248

CA eHealth Performance Manager up to version 6.3.2.12 suffers from Improper Restriction of Excessive Authentication Attempts via the /web/frames/ endpoint, allowing an attacker to attempt many passwords and potentially access a targeted account. The maintainer no longer supports this product, and...

GHSA-XM8R-5WH6-F46F Timing attack

While each ID is used for only one authentication attempt, a timing attack is possible to figure out in Autobahn...

What’s most interesting about the Florida water system hack? That we heard about it at all.

Stories about computer security tend to go viral when they bridge the vast divide between geeks and luddites, and this weeks news about a hacker who tried to poison a Florida towns water supply was understandably front-page material. But for security nerds whove been warning about this sort of...

PT-2021-5475

Name of the Vulnerable Software and Affected Versions WISE-4060, Adam-6050 D, Adam.NET Utility affected versions not specified Description The issue is related to a lack of authentication attempt limitations in the Ethernet module software. This could allow a remote attacker to gain full access t...

Under Construction < 3.86 - Authenticated Stored Cross-Site Scripting (XSS)

The Underconstruction plugin admin configuration is vulnerable to stored XSS issues which will be triggered in the main page of the site, even when the unfilteredhtml is disabled. Edit WPScanTeam A fix was attempted in v3.80, but was insufficient. In the meantime, more fields were found to be...

British Court Rejects U.S. Request to Extradite WikiLeaks' Julian Assange

A British court has rejected the U.S. government's request to extradite Wikileaks founder Julian Assange to the country on charges pertaining to illegally obtaining and sharing classified material related to national security. In a hearing at Westminster Magistrates' Court today, Judge Vanessa...

PT-2023-13770 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to insufficient limitations in some quiz web services, allowing students to bypass sequential navigation during a quiz attempt. Recommendations: At the moment, there is ...