Cobalt Strike, a penetration testing tool abused by criminals

If you were to compose a list of tools and software developed by security and privacy defenders that ended up being abused by the bad guys, then Cobalt Strike would unfortunately be near the top of the list. Maybe only Metasploit could give it a run for the first place ranking. Metasploit—probabl...

Important: glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer overflow in...

[SECURITY] Fedora 33 Update: cflow-1.6-8.fc33

GNU cflow analyzes a collection of C source files and prints a graph, charting control flow within the program. GNU cflow is able to produce both direct and inverted flowgraphs for C sources. Optionally a cross-reference listing can be generated. Two output formats are implemented: POSIX and GNU...

[SECURITY] Fedora 34 Update: cflow-1.6-8.fc34

GNU cflow analyzes a collection of C source files and prints a graph, charting control flow within the program. GNU cflow is able to produce both direct and inverted flowgraphs for C sources. Optionally a cross-reference listing can be generated. Two output formats are implemented: POSIX and GNU...

The vulnerability in the drivers/drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c files of the Linux operating system kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Hillrom Medical Device Management (Update B)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Hillrom Equipment: Welch Allyn medical device management tools Vulnerabilities: Out-of-Bounds Write, Out-of-Bounds Read 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

GSD-2021-1000194 usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4

usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000194 usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4

usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000312 usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4

usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

CheeseTools - Self-developed Tools For Lateral Movement/Code Execution

This repository has been made basing onto the already existing MiscTool, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a...

GLSA-202105-04 : Boost: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202105-04 Boost: Buffer overflow It was discovered that Boost incorrectly sanitized nextsize and maxsize parameter in orderedmalloc function when allocating memory. Impact : A remote attacker could provide a specially crafted...

Directory Traversal Vulnerability in C-Lodop Print Service System of Taian Montel Software Co.

The business scope of Taian Montel Software Co., Ltd. includes: software development; information technology consulting services; information system integration services; wholesale of computers, software and auxiliary equipment, and so on. Tai'an Mengtaier Software Co., Ltd. C-Lodop print service...

Fedora: Security Advisory for glibc (FEDORA-2021-2ba993d6c5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Schneider Electric C-Gate Detection

Binary data schneiderelectriccgatedetect.nbin...

Schneider Electric C-Gate < 2.11.6 Multiple Vulnerabilities

Binary data schneiderelectriccgateicsa-21-105-01.nbin...

DEBIAN-CVE-2021-33574

The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, leading to a denial of service application crash or possibly...

CVE-2021-33574

The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, leading to a denial of service application crash or possibly...

UBUNTU-CVE-2021-33574

The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, leading to a denial of service application crash or possibly...

Weak Password Vulnerability in C-Lodop Print Services System

Ltd. is a company whose main business is software development; information technology consulting services; information system integration services; wholesale of computers, software and auxiliary equipment; retail of computers, software and auxiliary equipment, etc. A weak password vulnerability...

GNU C Library 资源管理错误漏洞

The GNU C Library glibc, libc6 is an open source, free C language compiler released under the LGPL license. A resource management error vulnerability exists in GNU C Library versions 2.33 through 2.33, which can be exploited by an attacker to cause a denial of service...