Electron Security Vulnerabilities

Electron is Electron open source a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium can use HTML, CSS to achieve cross-platform desktop application writing. Electron has a security vulnerability , the vulnerability stems from in...

[SECURITY] Fedora 33 Update: dotnet3.1-3.1.111-1.fc33

.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...

[SECURITY] Fedora 32 Update: dotnet3.1-3.1.111-1.fc32

.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2021-07528)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to affect the integrity...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2021-07530)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to compromise confidentiality...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2021-07531)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to affect availability...

[SECURITY] Fedora 32 Update: adplug-2.3.3-1.fc32

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

[SECURITY] Fedora 33 Update: adplug-2.3.3-1.fc33

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

Fedora: Security Advisory for adplug (FEDORA-2021-64168929e4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

HFish Extended Enterprise Security Tests Actively Induced Open Source Honeypot Framework System for Weak Password Vulnerability

HackTL HFish Extended Enterprise Security Testing Active Induced Open Source Honeypot Framework System is a cross-platform honeypot platform based on Golang development. HFish Extended Enterprise Security Testing Active Induced Open Source Honeypot Framework System suffers from a weak password...

Tencent TIM windows version has dll hijacking vulnerability

TIM is a concise version of QQ Office, a cross-platform communication tool under Tencent that focuses on team office collaboration. A dll hijacking vulnerability exists in Tencent TIM windows version. Attackers can use the vulnerability to load malicious dll and execute malicious code...

Warning: Cross-Platform ElectroRAT Malware Targeting Cryptocurrency Users

Cybersecurity researchers today revealed a wide-ranging scam targeting cryptocurrency users that began as early as January last year to distribute trojanized applications to install a previously undetected remote access tool on target systems. Called ElectroRAT by Intezer, the RAT is written from...

ToRat - A Remote Administation Tool Written In Go Using Tor As A Transport Mechanism And RPC For Communication

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients. How to How to use ToRat Preview Current Features RPC Remote procedure Call based communication for easy addition of new functionallity Automatic upx...

LogMein LastPass Password Manager Authorization Issues Vulnerability

Logmein LogMeIn LastPass is a cross-platform online password management tool from US-based Logmein. LogMein LastPass Password Manager suffers from an authorization issue vulnerability that stems from the fact that password authentication for a problematic unlock can be bypassed by forcing the...

LogMein LastPass Password Manager Authorization Issues Vulnerability

Logmein LogMeIn LastPass is a cross-platform online password management tool from US-based Logmein. LogMein LastPass Password Manager suffers from an authorization issue vulnerability that originates from forcing the authentication result to be true via a runtime operation, which can bypass the P...

Zero-Click Wormable RCE Vulnerability Reported in Microsoft Teams

A zero-click remote code execution RCE bug in Microsoft Teams desktop apps could have allowed an adversary to execute arbitrary code by merely sending a specially-crafted chat message and compromise a target's system. The issues were reported to the Windows maker by Oskars Vegeris, a security...

HackSysExtremeVulnerableDriver

This is a repository for the HackSys Extreme Vulnerable Driver HEVD, a tool for testing and demonstrating various types of vulnerabilities in Windows drivers. The repository contains build scripts for both 32-bit and 64-bit architectures on Windows and Linux. The repository includes scripts for...

IBM DB2 Arbitrary Code Execution Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an arbitrary code execution vulnerability that can be exploited by an attacker to...

Rehex - Reverse Engineers' Hex Editor

A cross-platform Windows, Linux, Mac hex editor for reverse engineering, and everything else. Features Large 1TB+ file support Decoding of integer/floating point value types Disassembly of machine code Highlighting and annotation of ranges of bytes Side by side comparision of selections...

[SECURITY] Fedora 32 Update: nss-3.58.0-3.fc32

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...