13945 matches found
PT-2021-7242 · Opc Foundation · Opc Foundation Local Discovery Server
Name of the Vulnerable Software and Affected Versions: OPC Foundation Local Discovery Server LDS versions prior to 1.04.402.463 Description: The issue is related to a denial of service DoS that can be caused by remote attackers sending carefully crafted messages, leading to access of a memory...
CVE-2021-39156 vulnerabilities
Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...
CVE-2021-39155 vulnerabilities
Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...
Security Bulletin: Apache CXF vulnerability identified in IBM Tivoli Application Dependency Discovery Manager (CVE-2021-30468)
Summary This security bulletin addresses the vulnerability in Open Source Apache CXF that affect IBM Tivoli Application Dependency Discovery Manager. Vulnerability Details CVEID: CVE-2021-30468 DESCRIPTION: Apache CXF is vulnerable to a denial of service, caused by an infinite loop flaw in the...
CVE-2021-22252
creationtimestamp| type| source ---|---|--- 2021-08-24 00:23:25+00:00| seen| https://t.me/cibsecurity/27727...
Monopolization of the bidding platform
Handle animixar Vulnerability details Impact This is potentially a low-to-medium risk vulnerability as this will lead to the platform being monopolized by a handful of people; preventing any adoption and growth. Proof of Concept A very few super-users with a lot of funds at their disposal can mak...
Unix Software Discovery Commands Not Available
Nessus found problems running commands on the target host which are used to find software that is not managed by the operating system. Details of the issues encountered are reported by this plugin. Failure to properly execute commands used to find and characterize unmanaged software on the target...
Unix Software Discovery Commands Available
Nessus was able to determine that it is possible for plugins to find and identify versions of software on the target host. Software that is not managed by the operating system is typically found and characterized using these commands. This was measured by running commands used by unmanaged softwa...
Unix Software Discovery Command Checks
Nessus plugins run OS commands locally on the target host to discover and characterize software that is not managed by the target operating system. This plugin runs those commands over SSH to determine whether there is any problem that might prevent the successful discovery of unmanaged software...
How to install Frida into an Android application
On a recent job I was testing a rather interesting piece of technology that had several server side checks but they wanted to add some additional security on the client side. Great!! One of these additional checks was to see if Frida was running on the device, this was proving a difficult nut to...
[SECURITY] Fedora 33 Update: avahi-0.8-14.fc33
Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...
Fedora: Security Advisory for avahi (FEDORA-2021-b252318a99)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-34734
A vulnerability in the Link Layer Discovery Protocol LLDP implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper management of memory...
Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability
A vulnerability in the Link Layer Discovery Protocol LLDP implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper management of memory...
discovery-campervans.com.au Cross Site Scripting vulnerability OBB-2118507
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020, Apr 2020
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR10-FP55 and Version 8 SR6-FP0 used by IBM Tivoli Application Dependency Discovery Manager TADDM. These issues were disclosed as part of the IBM Java SDK updates in Jan2020 and April2020. Vulnerability...
Cisco Video Surveillance 7000 Series IP Cameras 资源管理错误漏洞
Cisco Video Surveillance 7000 Series IP Cameras is a video surveillance camera for network devices from Cisco. A resource management error vulnerability exists in the Link Layer Discovery Protocol LLDP implementation of the Cisco Video Surveillance 7000 Series IP Camera firmware, which stems from...
CVE-2020-28846
creationtimestamp| type| source ---|---|--- 2021-08-17 20:16:02+00:00| seen| https://t.me/cibsecurity/27440...
OPENSUSE-SU-2021:1162-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: ansible: - The support level for ansible is l2, not l3 dracut-saltboot: - Force installation of libexpat.so.1 bsc1188846 - Use kernel parameters from PXE formula also for local boot golang-github-prometheus-prometheus: - Provide and reload firewalld...
The vulnerability in the implementation of the SSDP protocol for the WiFi Simple Config server (wscd) in the Realtek SDK development tools allows a hacker to execute arbitrary code.
The vulnerability of the SSDP protocol implementation in the WiFi Simple Config wscd server developed with the Realtek SDK arises due to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the UPnP SUBSCRIBE/UNSUBSCRIBE message...