CVE-2021-0388

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User...

Mail.ru: Stored xss in calendar via call link

Call link URI schema in calendar.mail.ru web application was filtered improperly, allowing malicious javascript: links...

EulerOS Virtualization 3.0.6.6 : gd (EulerOS-SA-2021-1473)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash o...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27256

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27256

CVE-2021-27256 affects NETGEAR R7800 firmware 1.0.2.76. The flaw resides in the handling of the rc_service parameter passed to apply_save.cgi, where insufficient validation allows an attacker to execute arbitrary commands with root privileges. Although authentication is required, the authenticati...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-1524)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Marketing firm CallX exposed customers data including call recordings

By Habiba Rashid CallX was using an unsecured Amazon Web Services S3 bucket to store audio client files. This is a post from HackRead.com Read the original post: Marketing firm CallX exposed customers data including call recordings...

EulerOS Virtualization 3.0.6.6 : util-linux (EulerOS-SA-2021-1524)

According to the version of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characte...

PT-2021-8267 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76: mt7915 component in the Linux kernel, where a vulnerability was resolved by properly checking rate info to fix unexpected reporting. The vulnerability...

Ryuk Ransomware: Now with Worming Self-Propagation

A new version of the Ryuk ransomware is capable of worm-like self-propagation within a local network, researchers have found. The variant first emerged in Windows-focused campaigns earlier in 2021, according to the French National Agency for the Security of Information Systems ANSSI. The agency...

Qualcomm 封闭源组件安全漏洞

A security vulnerability exists in a Qualcomm closed source component that stems from insufficient checks in the system call handler...

(Pwn2Own) NETGEAR R7800 apply_save.cgi rc_service Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the...

CVE-2021-1734

Windows Remote Procedure Call Information Disclosure Vulnerability...

CVE-2021-1734

Windows Remote Procedure Call Information Disclosure Vulnerability...

CVE-2021-1734 Windows Remote Procedure Call Information Disclosure Vulnerability

...

FreeBSD-SA-21:05.jail_chdir

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:05.jailchdir Security Advisory The FreeBSD Project Topic: jailattach2 relies on the caller to change the cwd Category: core Module: jail Announced: 2021-02-2...

D-Link DAP-2020 WEB_CmdFileList Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. The issue results from the...

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

TDoS Attacks Take Aim at Emergency Services

Telephony denial-of-service TDoS attacks, which affect the availability and readiness of call centers, are hitting critical first-responder facilities, according to the Federal Bureau of Investigation FBI. A TDoS attack is designed to prevent incoming and outgoing calls, by flooding a target with...