217 matches found
GSD-2022-1004965 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...
#StopRansomware: Vice Society
Note: This joint Cybersecurity Advisory CSA is part of an ongoing StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These StopRansomware advisories include recently and historically observed tactics, techniques,...
U.S. Dept Of Defense: [███████] Remote Code Execution at ██████ [CVE-2021-44529] [HtUS]
IP Address used to find vulnerability: ██████ Vulnerable Website URL or Application: https://████ pomcldsvr2.████ Proof of ownership: ███ Summary: The server at https://███ is running a vulnerable version of CSA. A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows...
CISA warns of cyberespionage by Iranian APT “MuddyWater”
Cybersecurity agencies in the US and UK have issued a joint cybersecurity advisory CSA on MuddyWater, a government-sponsored Iranian advanced persistent threat APT actor. The Cybersecurity and Infrastructure Security Agency CISA, the Federal Bureau of Investigation FBI, the US Cyber Command Cyber...
FBI and USSS Release Advisory on BlackByte Ransomware
The Federal Bureau of Investigation FBI and the United States Secret Service USSS have released a joint Cybersecurity Advisory CSA identifying indicators of compromise associated with BlackByte ransomware. BlackByte is a Ransomware-as-a-Service group that encrypts files on compromised Windows hos...
CVE-2021-44529
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows an unauthenticated user to execute arbitrary code with limited permissions nobody...
CVE-2021-44529
CVE-2021-44529 is an Ivanti EPM Cloud Services Appliance (CSA) code injection vulnerability. An unauthenticated user can execute arbitrary code with limited permissions (nobody) via the CSA web stack (notably /client/index.php and related code path). Public documents indicate affected CSA version...
CVE-2021-44529: Improper Control of Generation of Code
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows an unauthenticated user to execute arbitrary code with limited permissions nobody...
FBI-CISA Advisory on Ransomware Awareness for Holidays and Weekends
Today, the Federal Bureau of Investigation FBI and CISA released a Joint Cybersecurity Advisory CSA to urge organizations to ensure they protect themselves against ransomware attacks during holidays and weekends—when offices are normally closed. Although FBI and CISA do not currently have any...
Espressif esp32 has an unspecified vulnerability
Espressif ESP32 is a microcontroller from China Lexin Information Technology Espressif. espressif esp32 has a security vulnerability that allows an attacker to cause a denial of service and kernel crash via a misformatted beacon csa frame...
CVE-2021-34173
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover...
CVE-2021-34173
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover...
CVE-2021-34173
The CVE-2021-34173 entry affects Espressif ESP32 (v4.2 and earlier). The root cause is a malformed beacon CSA frame that can trigger a denial of service and kernel panic, requiring a reboot to recover. Public descriptions consistently state DoS/kernel panic without detailing patches or exploitati...
PT-2021-20392
Name of the Vulnerable Software and Affected Versions: Espressif esp32 versions prior to 4.2 Description: The issue allows an attacker to cause a Denial of Service and kernel panic via a malformed beacon csa frame, requiring the device to be rebooted to recover. Recommendations: For versions prio...
CVE-2021-34173: Undefined Security Weakness
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover...
PT-2021-10495
Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a SQL injection vulnerability. It stems from the log edit.php files failing to filter the csa to user parameter. Remote attackers can exploit this to obtain database...
White Shark System SQL注入漏洞
White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...
White Shark System SQL注入漏洞
White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...
PT-2021-10499
Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a SQL injection vulnerability. It arises from the default task edituser.php files failing to properly filter the csa to user parameter. This allows remote attackers to...
What you need to know: Transitioning CSA STAR for Cloud Controls Matrix 4.0
In January of this year, the Cloud Security Alliance CSA released a major revision to its widely adopted Cloud Controls Matrix CCM in the form of version 4.0. This comes in the middle of a calendar year where several alternative information security frameworks are also expected to be refined,...