The vulnerability of OPPO’s 5G router, which stems from the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.

The vulnerability of OPPO’s 5G router exists due to the failure to take measures to neutralize certain components. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Apache Log4j Vulnerability - Lenovo Support US

No description provided...

CVE-2021-25518

An improper boundary check in securelog of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution...

Authentication flaw

Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...

Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers

Google on Tuesday said it took steps to disrupt the operations of a sophisticated "multi-component" botnet called Glupteba that approximately infected more than one million Windows computers across the globe and stored its command-and-control server addresses on Bitcoin's blockchain as a resilien...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An input validation error vulnerability exists in Google Android, which can be exploited by attackers to obtain sensitive information about affected components...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google Inc. A security vulnerability exists in Google Android 11, which stems from an information disclosure vulnerability in the system's Kernel components Kernel...

stealthcomponents.com Cross Site Scripting vulnerability OBB-2291068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hitachi Energy APM Edge

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Low attack complexity Vendor: Hitachi Energy Equipment: Transformer Asset Performance Management APM Edge Vulnerability: Reliance on Uncontrolled Component 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original advisory...

PT-2021-23540 · Unknown · Topease Platform

Name of the Vulnerable Software and Affected Versions: TopEase Platform versions prior to 7.1.28 Description: The issue allows an authenticated remote attacker to bypass access controls and view sensitive components, such as the Shape Editor and Settings, which are intended for higher-privileged...

CVE-2021-34424

A vulnerability was discovered in the Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.8.4, Zoom Client for Meetings for Blackberry for Android and iOS before version 5.8.1, Zoom Client for Meetings for intune for Android and iOS before version 5.8.4, Zoom...

The vulnerability of the asynchronous components of the “ASSaD-Video” surveillance system, related to uncontrolled resource consumption, allows a intruder to cause a service failure.

The vulnerability of the asynchronous components of the “ASSaD-Video” surveillance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2021-23201

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or...

Hardcoded credentials

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or...

Virtuozzo Linux 9 Beta

Virtuozzo Linux 9 Beta is a 1:1 clone of Redhat Enterprise Linux RHEL 9 Beta. It is free to download, use, and distribute. Virtuozzo Linux 9 Beta offers new features and components, a new kernel, and enhanced security...

The vulnerability of the Microsoft Access component in Microsoft Office programs and Microsoft 365 apps allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Access components in Microsoft Office and Microsoft 365 apps is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted request...

The vulnerability of the Portals components in Google Chrome and Microsoft Edge allows a hacker to escape from an isolated software environment.

The vulnerability of the Portals components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to escape from an isolated software environment remotely...

PT-2021-6433 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.27 and prior Description: The issue is related to insufficient input validation in the MySQL Server component, specifically in the Server: Components Services. This can be exploited by a remote attacker to cause a...

CVE-2021-30259

Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure...

CVE-2021-34417

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Recording Connector before version 3.8.45.20210703, Zoom On-Premise Virtual Room...