Code injection

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

Double free

A Double Free vulnerability in the software forwarding interface daemon sfid process of Juniper Networks Junos OS allows an adjacently-connected attacker to cause a Denial of Service DoS by sending a crafted ARP packet to the device. Continued receipt and processing of the crafted ARP packets wil...

Threat Source Newsletter (April 22, 2021)

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We went viral this week! Everyone seemed to love to joke about these vulnerabilities we discovered in a WiFi-connected air fryer. An attacker, if they had physical access to the device, could exploit these... This is only the...

[SECURITY] Fedora 33 Update: leptonica-1.80.0-3.fc33

The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...

WiZ Connected WiZ Colors A60 Information Disclosure Vulnerability

WiZ Connected WiZ Colors A60 is a smart LED light from the Chinese company WiZ Connected. An information disclosure vulnerability exists in WiZ Colors A60 version 1.14.0, which stems from the device sending unnecessary information to the cloud controller server. No details of the vulnerability ar...

CyberMDX and Microsoft: Protecting life-saving medical devices

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. While hospitals continue to battle the COVID-19 pandemic, many are battling other “viruses” behind the scenes. Malware, ransomware, and phishing attacks against healthcare...

CyberMDX and Microsoft: Protecting life-saving medical devices

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. While hospitals continue to battle the COVID-19 pandemic, many are battling other “viruses” behind the scenes. Malware, ransomware, and phishing attacks against healthcare...

“Huge upsurge” in DDoS attacks during pandemic

Researchers at Netscout have released a report analyzing the malicious internet traffic of 2020 and comparing it to the years before. Some of the results were as expected: Brute-forcing credentials and more targeting towards internet-connected devices were foreseeable and have been discussed at...

How the NAME:WRECK Bugs Impact Consumers, Businesses

Researchers estimate more than 100 million internet-connected devices are vulnerable to a class of flaws dubbed NAME:WRECK. Devices ranging from smartphones, aircraft navigation systems and industrial internet of things IIoT endpoints are vulnerable to either a denial-of-service DoS or remote...

CVE-2021-30144

The Dashboard plugin through 1.0.2 for GLPI allows remote low-privileged users to bypass access control on viewing information about the last ten events, the connected users, and the users in the tech category. For example, plugins/dashboard/front/main2.php can be used...

PT-2021-18629 · Glpi · Glpi Dashboard Plugin

Name of the Vulnerable Software and Affected Versions: GLPI Dashboard plugin versions prior to 1.0.3 Description: The issue allows remote low-privileged users to bypass access control, enabling them to view sensitive information such as the last ten events, connected users, and users in the tech...

GLPI 安全漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

[SECURITY] Fedora 34 Update: switchboard-plug-bluetooth-2.3.5-1.fc34

The Bluetooth plug is a section in the Switchboard System Settings that allows the user to manage bluetooth settings and connected devices...

[SECURITY] Fedora 33 Update: switchboard-plug-bluetooth-2.3.5-1.fc33

The Bluetooth plug is a section in the Switchboard System Settings that allows the user to manage bluetooth settings and connected devices...

PT-2021-6478

Name of the Vulnerable Software and Affected Versions Rockwell Automation Connected Components Workbench version 12.00.00 and prior Description The issue is related to the software's failure to sanitize paths within the .ccwarc archive file during extraction, also known as a Zip Slip vulnerabilit...

PT-2021-6479

Name of the Vulnerable Software and Affected Versions Rockwell Automation Connected Components Workbench version 12.00.00 and prior Description The issue is related to the deserialization of objects, which can be exploited by attackers to craft malicious objects. If a local user opens such an...

Presidential Cybersecurity and Pelotons

President Biden wants his Peloton in the White House. For those who have missed the hype, its an Internet-connected stationary bicycle. It has a screen, a camera, and a microphone. You can take live classes online, work out with your friends, or join the exercise social network. And all of that i...

The vulnerability of the Cisco Connected Mobile Experiences software, related to authentication errors, allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the Cisco Connected Mobile Experiences software relates to authentication errors. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software allows a hacker to obtain information about users of the CMX system.

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain access and disclose information about users of the CMX system...