Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from a content security policy that blocks domains that use wildcards may fail...

kernel: scsi: sg: Allow waiting for commands to complete on removed device

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Allow waiting for commands to complete on removed device When a SCSI device is removed while in active use, currently sg will immediately return -ENODEV on any attempt to wait for active commands that were sent before t...

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU resulting in a denial of service condition.

...

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Pt. 2

Welcome back to our blog series on Rapid7's IoT Village exercise from DEF CON 30. Last week, we covered the basics of the exercise and achieving access to flash memory. In this post, we'll cover how to extract partition data. Extracting partition data The next step in our hands-on IoT hacking...

The vulnerability of the SCSI am53c974 adapter driver in the hardware emulation software QEMU allows a hacker to induce a service failure.

The vulnerability of the SCSI am53c974 adapter driver in the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause a system failure...

Radioactivity monitoring and warning system hacked, disabled by attackers

The Spanish police arrested two people under the accusation of tampering with the Red de Alerta a la Radiactividad RAR. The RAR is part of the Spanish national security systems and in use to monitor gamma radiation levels across the country. The network is managed, operated and maintained by the...

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. v1.0 of Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers via the patientsearch.php with th...

Weak Password Vulnerability in Bohua NetDragon Information Security All-in-One Computer

Ltd. is a high-tech enterprise mainly engaged in software product development, information security product development, and computer system integration and information security services as a whole. A weak password vulnerability exists in Bohua NetDragon Information Security All-in-One Computer,...

Arbitrary File Download Vulnerability in Bohua NetDragon Information Security All-in-One Computer

Ltd. is a high-tech enterprise mainly engaged in software product development, information security product development, and computer system integration and information security services as a whole. An arbitrary file download vulnerability exists in Bohua NetDragon Information Security All-in-One...

Weak password vulnerability in WTScada configuration software of Changzhou Wenting Software Co.

Changzhou Wenting Software Co., Ltd. is a company whose business scope includes: software development; software sales; computer system integration and so on. Changzhou Wenting Software Co., Ltd WTScada configuration software has a weak password vulnerability that can be exploited by attackers to...

Weak password vulnerability in WTScada configuration software

Changzhou Wenting Software Co., Ltd. was established on August 20, 2014, and the company's business scope includes: software development; software sales; computer system integration, etc. WTScada configuration software has a weak password vulnerability, attackers use the weak password to log in t...

22-Year-Old Charged With Hacking Water System and Endangering Lives

A 22-year-old man from the U.S. state of Kansas has been indicted on charges that he unauthorizedly accessed a public water facility's computer system, jeopardizing the residents' safety and health in the local community. Wyatt A. Travnichek, 22, of Ellsworth County, Kansas, has been charged with...

Hackers try to poison Florida City’s drinking water

The FBI, the Secret Service, and the Pinellas County Sheriffs Office are currently investigating an attempted poisoning of a city by an individual or group of hackers that occurred Friday last week. If it hadnt been caught in time, at least 15,000 people could have been affected. In a Monday pres...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that originates from a logical error in kext loading in IOKit. A native application can execute arbitrary code using elevated privileges. The vulnerability exist...

Arbitrary File Read Vulnerability in SeaCMS

SeaCMS is designed to solve the core needs of station owners and a set of program adaptive computer, cell phone, tablet, APP multiple terminal entrance content management system. SeaCMS has an arbitrary file reading vulnerability that can be exploited by attackers to obtain sensitive information...

Targeted Ransomware Attacks Hit Several Spanish Companies

Everis, one of the largest IT consulting companies in Spain, suffered a targeted ransomware attack on Monday, forcing the company to shut down all its computer systems until the issue gets resolved completely. Ransomware is a computer virus that encrypts files on an infected system until a ransom...

CVE-2019-12506

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target...

Unpatched Fujitsu Wireless Keyboard Bug Allows Keystroke Injection

UPDATE Fujitsu is stopping sales for its popular wireless keyboard after a researcher discovered it is vulnerable to keystroke injection attacks that could allow an adversary to take control of a victim’s system. Researchers with Germany-based SySS reported on Friday that the high-severity...

USN-3753-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. CVE-2017-13168 Wen Xu discovered that a use-after-free vulnerability...

Microsoft Windows: Shut down system immediately if unable to log security audits

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winauditshutdownunablelog.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Audit: Shut down system immediately if unable to log security audits Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...