Cisco Nexus 1000V VSM/VEM Communication Encryption Bypass (CVE-2013-1209)

The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via...

Malicious code in solodev-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1231265823e0166c738416defa7883c13c543b22ed1f2240daa1517f20908741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-27766 CVE-2023-3863 affecting package kernel for versions less than 5.15.122.1-2

A use-after-free flaw was found in nfcllcpfindlocal in net/nfc/llcpcore.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue...

UBUNTU-CVE-2023-3863

A use-after-free flaw was found in nfcllcpfindlocal in net/nfc/llcpcore.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue...

Malicious code in nwa-uikit-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90a7d076b934f9928aa5301f8d62f0218fd96a1f59a26102659ee688114d764a The OpenSSF Package Analysis project identified 'nwa-uikit-web' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1255 Malicious code in nwa-uikit-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90a7d076b934f9928aa5301f8d62f0218fd96a1f59a26102659ee688114d764a The OpenSSF Package Analysis project identified 'nwa-uikit-web' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Cross site scripting

A vulnerability was found in Travelmate Travelable Trek Management Solution 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Box Handler. The manipulation of the argument comment leads to cross site scripting. The attack may be...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a memory misreference vulnerability that originates from a confusion in the instruction nfcllcpfindlocal responsible for freeing memory in NFC's...

MAL-2023-1128 Malicious code in calfirebof.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e25233bbab089a468ee98d824050f903357440485e2fce9fb4291afdec427485 The OpenSSF Package Analysis project identified 'calfirebof.web' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-3804

A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This vulnerability affects unknown code of the file /Service/FileHandler.ashx. The manipulation of the argument userFile leads to unrestricted upload. The exploit has been...

The vulnerability of the microprogramming software for Rockwell Automation communication modules 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR, 1756-EN4TRK, and 1756-EN4TRXT controllers from the Allen-Bradley ControlLogix series allows a intruder to cause a service failure.

The vulnerability of the microprogrammed software in the communication modules of Rockwell Automation’s controllers models 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR,...

MAL-2023-1269 Malicious code in policycms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6fcf99ac2d853174c6d17fd728c94d9fd33306bddfc79312ba47ffe026e42606 The OpenSSF Package Analysis project identified 'policycms' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @metronetinc/react-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60618ba400c79770b18a43c36d0b3b9723c5f4df204ac012d6aea96d17de5bdd The OpenSSF Package Analysis project identified '@metronetinc/react-component-library' @ 9.999.8 npm as malicious. It is considered malicious...

SUSE CVE-2023-3727

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2023-3728

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

MAL-2023-1287 Malicious code in scbe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0038adb669e3dbac6bc53a3f8c60a1ee4e2acdfcf28ab8c419e8b39638f14a9 The OpenSSF Package Analysis project identified 'scbe' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

The vulnerability of the semget() function in the ipc/sem.c module of the Linux kernel’s interprocess communication subsystem allows a attacker to cause a service failure.

The vulnerability of the semget function in the ipc/sem.c module of the Linux interprocess communication subsystem is related to the lack of control over the amount of resources allocated. Exploiting this vulnerability could allow a attacker to cause service failures...

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code executio...

CVE-2023-21994

Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware component: Android Mobile Authenticator App. Supported versions that are affected are Prior to 11.1.2.3.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communicati...

Five key ways to effectively manage email signatures

By Owais Sultan Email is a key, highly effective communication concept used by a variety of business environments around the world.… This is a post from HackRead.com Read the original post: Five key ways to effectively manage email signatures...