FBI Analyst Indicted for Theft of Osama bin Laden Threat Intel

An FBI analyst with top-secret security clearance illegally squirreled away national-security documents related to Osama bin Laden, al-Qaeda, cybersecurity and more in her home for years, the feds say. Kendra Kingsbury, who was working in the FBI’s Kansas City Division until being put on leave in...

PT-2021-10468

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.47 Description: The issue is related to a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference by...

Null pointer dereference

Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

PT-2021-10448

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.47 Description: The issue is related to a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can exploit this to cause a Denial of Service due to a NULL pointer...

PT-2021-10455

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs version 6.46.3 Description: The issue is related to a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access...

PT-2021-10452

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs version 6.47 Description: The issue is related to a memory corruption problem in the /nova/bin/diskd process. It can be exploited by an authenticated remote attacker to cause a Denial of Service due to invalid memory access...

CVE-2020-20237: Out-of-bounds Write

Mikrotik RouterOs 6.46.3 stable tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access...

PT-2021-10464

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.47 Description: The issue is related to a division by zero error in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to this error. Recommendations: For...

PT-2021-10450

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs version 6.44.6 Description: The issue is a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference by exploiting this issue...

CVE-2020-20220: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

PT-2021-10456

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs version 6.46.3 Description: The issue is related to a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access...

PT-2021-10465

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.47 Description: The issue is related to a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference by...

CVE-2020-20227: Out-of-bounds Write

Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access...

CVE-2020-20236: Out-of-bounds Write

Mikrotik RouterOs 6.46.3 stable tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access...

MikroTik RouterOS Memory Corruption Vulnerability (CNVD-2021-49780)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/sniffer process. A remote attacker could...

IPFire 2.25 Core Update 156 and Prior pakfire.cgi Authenticated RCE

This module exploits an authenticated command injection vulnerability in the /cgi-bin/pakfire.cgi web page of IPFire devices running versions 2.25 Core Update 156 and prior to execute arbitrary code as the root user. Module Options msf use exploit/linux/http/ipfire/pakfireexec msf...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow RaggedBinCount, which is caused by a heap out-of-bounds write to "RaggedBinCount". An attacker could exploit this vulnerability to cause a...

Google TensorFlow 代码问题漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow RaggedBinCount. A local attacker could exploit this vulnerability to cause a denial of service...

MikroTik RouterOS 缓冲区错误漏洞

MikroTik RouterOS is a Linux-based router operating system developed by MikroTik Latvia. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a denial of service null pointer dereference...

PT-2021-10469

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.47 Description: The issue is related to a memory corruption problem in the /nova/bin/resolver process. It can be exploited by an authenticated remote attacker to cause a Denial of Service due to invalid...