Trojan.Win32.Agent.xaamkd Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/095651e1704b501123b41ea2e9736820.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Agent.xaamkd Vulnerability: Insecure Permissions Description: The malware creates an di...

RHEL 8 : nodejs:12 (RHSA-2021:3623)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3623 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

UBUNTU-CVE-2021-32280

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...

UBUNTU-CVE-2021-39579

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function stringhash located in q.c. It allows an attacker to cause code Execution...

CVE-2021-39564

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfDumpActions located in swfaction.c. It allows an attacker to cause code Execution...

A New Wave of Malware Attack Targeting Organizations in South America

A spam campaign delivering spear-phishing emails aimed at South American organizations has retooled its techniques to include a wide range of commodity remote access trojans RATs and geolocation filtering to avoid detection, according to new research. Cybersecurity firm Trend Micro attributed the...

fig2dev 代码问题漏洞

Xfig fig2dev is a tool for printing and exporting .fig format files. A code issue vulnerability exists in fig2dev due to a null pointer dereference in the compute closed spline function located in trans spline.c. The vulnerability is caused by a null pointer dereference in the compute closed spli...

libredwg 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. a null pointer dereference vulnerability exists in the bitreadBB function in bits.c in LibreDWG version 0.10.1.3751. An attacker could exploit this vulnerability to cause a denial of service...

Gravity 代码问题漏洞

Gravity is a powerful, dynamically typed, lightweight, embeddable programming language written in C. It is used for procedural programming, object-oriented programming, and data-driven programming. It is used for procedural, object-oriented, functional, and data-driven programming. Gravity suffer...

The vulnerability of the call() function in the src/parser.c component of the control flow analyzer for C source files, related to the use of memory after its release, allows a attacker to trigger a service failure.

The vulnerability of the call function in the src/parser.c component of the control flow analyzer for C source files is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the aresdestroy() and ares_getaddrinfo() functions in the C-ares asynchronous DNS query library involves the use of memory after it is freed, allowing an attacker to cause a service failure.

The vulnerability of the aresDestroy and aresGetAddrInfo functions in the C-ares asynchronous DNS request library is related to the possibility of aresDestroy being called before aresGetAddrInfo has completed. Exploiting this vulnerability could allow a attacker to cause a service failure...

OESA-2021-1345 git security update

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...

UBUNTU-CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c...

UBUNTU-CVE-2020-21534

fig2dev 3.2.7b contains a global buffer overflow in the getline function in read.c...

UBUNTU-CVE-2020-21530

fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...

CVE-2021-39208

CVE-2021-39208 applies to SharpCompress (a fully managed C# library for various compression formats). Versions prior to 0.29.0 are vulnerable to partial path traversal during extraction when ExtractionOptions.ExtractFullPath is true. The code validates that destinationFileName begins with fullDes...

fig2dev 缓冲区错误漏洞

fig2dev is used to convert .fig files to various graphics languages and formats. A stack buffer overflow vulnerability exists in the readtextobject function in read.c in fig2dev version 3.2.7b. No detailed vulnerability details are currently available...

Schneider Electric 多款产品授权问题漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug C-Bus installations on personal computers. An authorization issue vulnerability exists in several Schneider Electric products, which could allow remote code execution when a...

Huawei EulerOS: Security Advisory for mutt (EulerOS-SA-2021-2409)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : mutt (EulerOS-SA-2021-2409)

According to the version of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service mailbox unavailability by sending email messages with sequences of...