Memory Corruption Vulnerability in VLC Player (CNVD-2021-16334)

VLC is a cross-platform multimedia player and framework for playing most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols. VLC Player suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Digia QT has a binary vulnerability

Qt is a cross-platform C application development framework. A binary vulnerability exists in Digia QT, which can be exploited by attackers to cause a denial-of-service attack...

Design/Logic Flaw

The Electron framework lets you write cross-platform desktop applications using JavaScript, HTML and CSS. In affected versions of Electron IPC messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, c...

CVE-2020-26272

CVE-2020-26272 (Electron IPC frame routing) : In Electron, IPC messages sent from the main process to a subframe in the renderer process (via webContents.sendToFrame , or in handlers using event.reply or the remote module) can be delivered to the wrong frame in versions before fixed releases. Aff...

Electron Security Vulnerabilities

Electron is Electron open source a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium can use HTML, CSS to achieve cross-platform desktop application writing. Electron has a security vulnerability , the vulnerability stems from in...

[SECURITY] Fedora 33 Update: dotnet3.1-3.1.111-1.fc33

.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...

[SECURITY] Fedora 32 Update: dotnet3.1-3.1.111-1.fc32

.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2021-07528)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to affect the integrity...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2021-07531)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to affect availability...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2021-07530)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to compromise confidentiality...

[SECURITY] Fedora 32 Update: adplug-2.3.3-1.fc32

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

[SECURITY] Fedora 33 Update: adplug-2.3.3-1.fc33

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

Fedora: Security Advisory for adplug (FEDORA-2021-64168929e4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

HFish Extended Enterprise Security Tests Actively Induced Open Source Honeypot Framework System for Weak Password Vulnerability

HackTL HFish Extended Enterprise Security Testing Active Induced Open Source Honeypot Framework System is a cross-platform honeypot platform based on Golang development. HFish Extended Enterprise Security Testing Active Induced Open Source Honeypot Framework System suffers from a weak password...

Tencent TIM windows version has dll hijacking vulnerability

TIM is a concise version of QQ Office, a cross-platform communication tool under Tencent that focuses on team office collaboration. A dll hijacking vulnerability exists in Tencent TIM windows version. Attackers can use the vulnerability to load malicious dll and execute malicious code...

Warning: Cross-Platform ElectroRAT Malware Targeting Cryptocurrency Users

Cybersecurity researchers today revealed a wide-ranging scam targeting cryptocurrency users that began as early as January last year to distribute trojanized applications to install a previously undetected remote access tool on target systems. Called ElectroRAT by Intezer, the RAT is written from...

ToRat - A Remote Administation Tool Written In Go Using Tor As A Transport Mechanism And RPC For Communication

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients. How to How to use ToRat Preview Current Features RPC Remote procedure Call based communication for easy addition of new functionallity Automatic upx...

LogMein LastPass Password Manager Authorization Issues Vulnerability

Logmein LogMeIn LastPass is a cross-platform online password management tool from US-based Logmein. LogMein LastPass Password Manager suffers from an authorization issue vulnerability that stems from the fact that password authentication for a problematic unlock can be bypassed by forcing the...

LogMein LastPass Password Manager Authorization Issues Vulnerability

Logmein LogMeIn LastPass is a cross-platform online password management tool from US-based Logmein. LogMein LastPass Password Manager suffers from an authorization issue vulnerability that originates from forcing the authentication result to be true via a runtime operation, which can bypass the P...

Zero-Click Wormable RCE Vulnerability Reported in Microsoft Teams

A zero-click remote code execution RCE bug in Microsoft Teams desktop apps could have allowed an adversary to execute arbitrary code by merely sending a specially-crafted chat message and compromise a target's system. The issues were reported to the Windows maker by Oskars Vegeris, a security...