Security fix for the ALT Linux 10 package samba version 4.16.7-alt1

Nov. 22, 2022 Evgeny Sinelnikov 4.16.7-alt1 - Update to maintenance release of Samba 4.16 Samba15203 - Security fixes: + CVE-2022-42898: Samba's Kerberos libraries and AD DC failed to guard against integer overflows when parsing a PAC on a 32-bit system, which allowed an attacker with a forged PA...

Metasploit Weekly Wrap-UP

GLPI htmLawed PHP Command Injection Our very own bwatters-r7 wrote a module for an unauthenticated PHP command injection vulnerability that exists in various versions of GLPI. The vulnerability is due to a third-party vendor test script being present in default installations. A POST request to...

Adobe Reader DC Continuous Security Update (APSB22-46) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Adobe Acrobat DC Continuous Security Update (APSB22-46) - Windows

Adobe Acrobat Reader is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Adobe Reader DC Continuous Security Update (APSB22-46) - Windows

Adobe Acrobat Reader is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Adobe Acrobat DC Continuous Security Update (APSB22-46) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Adobe Acrobat 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat DC prior to version 22.003.20258 and Acrobat 2020 version 20.005.30407, which originates from a stack-based buffer...

Adobe Acrobat 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat, which stems from an attacker's ability to implement a stack-based buffer overflow leading to arbitrary code...

Man In The Middle (MitM)

samba:xenial is vulnerable to man-in-the-middle. A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name principal in the request with any...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-2401)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-33081

Affects: Intel SSD DC Products firmware. Issue: protection mechanism failure in the firmware may allow a local, privileged user to cause information disclosure. Impact: based on the CVE entry, confidentiality is at risk, with local attack prerequisites and high privilege requirements; details in ...

CVE-2021-33076

CVE-2021-33076 describes an improper authentication flaw in firmware for some Intel SSD DC products that could allow an unauthenticated user to escalate privileges via physical access. Affected component: firmware of Intel SSD DC products; root cause: improper authentication mechanism in firmware...

Intel(R) SSD DC 授权问题漏洞

IntelR SSD DC is an internal solid state drive from Intel Corporation USA. A security vulnerability exists in IntelR SSD DC Products that stems from improper authentication in its firmware that could allow an unauthenticated user to potentially escalate privileges through physical access...

PT-2022-10201

Name of the Vulnerable Software and Affected Versions IntelR SSD DC Products affected versions not specified Description The issue concerns improper authentication in the firmware of some IntelR SSD DC Products. This may allow an unauthenticated user to potentially enable escalation of privilege...

CVE-2021-33079: Protection Mechanism Failure

Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-33076: Improper Authentication

Improper authentication in firmware for some IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-33081: Protection Mechanism Failure

Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...

Malicious code in dc-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dceb4a54732ea88a32914ede9a5ffd5c61c8593fa9ac72465d3f691b8e8f96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dc-test-jq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd0f813c9a00e7fa7804deeffffa87ae75cfebcc7a9135b5d2bdc51ff38a473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2366 Malicious code in dc-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dceb4a54732ea88a32914ede9a5ffd5c61c8593fa9ac72465d3f691b8e8f96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...