Disruption on High Seas: Shipping Software Hit by Ransomware Attack

By Habiba Rashid The company targeted in the ransomware attack is DNV, a prominent and widely-recognized provider of digital ship management solutions. This is a post from HackRead.com Read the original post: Disruption on High Seas: Shipping Software Hit by Ransomware Attack...

The vulnerability of the nvkm_vmm_pfn_map() function in the Linux operating system’s GPU Nouveau driver allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the nvkmvmmpfnmap function in the Linux kernel’s GPU Nouveau driver is related to improper handling of memory overflow conditions. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

The vulnerability of the fs/io_uring.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/iouring.c component in the Linux kernel operating system is related to the reutilization of freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of SAP SQL Anywhere relational database management systems lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.

The vulnerability of SAP SQL Anywhere relational database management systems is related to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using specially crafted queries, utilizing the ARRAY arra...

FortiOS Flaw Exploited as Zero-Day in Attacks on Government and Organizations

A zero-day vulnerability in FortiOS SSL-VPN that Fortinet addressed last month was exploited by unknown actors in attacks targeting governments and other large organizations. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at governmental or...

The vulnerability of the Model I/O component in operating systems such as Mac OS, iOS, and iPadOS allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the Model I/O component in operating systems such as Mac OS, iOS, and iPadOS lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using a specially...

The vulnerability of Microprogrammed Ethernet Switchboard software, related to memory release errors, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from FortiSwitch is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted LLDP/CDP/EDP packets...

UBUNTU-CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

CVE-2023-0017

An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current...

Vulnerability of the PAM module for Juniper Networks Junos OS and Junper Networks Junos OS Evolved, allowing a hacker to trigger a service failure

The vulnerability of the PAM module in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2022-47976

The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections...

CVE-2022-47976

The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections...

PT-2023-15540 · Dmsdp · Dmsdp

Name of the Vulnerable Software and Affected Versions: DMSDP module of the distributed hardware affected versions not specified Description: The issue concerns a vulnerability in the DMSDP module that could allow imposter control connections, potentially leading to the disconnection of normal...

K85054496: BIG-IP DNS resolver vulnerability CVE-2022-28708

Security Advisory Description When a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel TMM process to terminate. CVE-2022-28708 Impact Traffic is disrupted while the TMM process...

The vulnerability of the Smart Card Login component of the cloud platform, which protects applications from unauthorized users and Cisco Duo devices for Mac OS, is related to authentication procedures that allow a violator to trigger a service failure.

The vulnerability of the Smart Card Login component in the cloud platform, which is designed to protect applications from unauthorized users and Cisco Duo devices on Mac OS, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the SIP protocol implementation in the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure.

The vulnerability of the SIP protocol implementation in the Snort intrusion detection system of Cisco Firepower Threat Defense FTD is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to remotely cause service interruptions by sending traff...

CVE-2022-43436

The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service...

CVE-2022-39039

aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTPs request to launch Server-Side Request Forgery SSRF attack, to perform arbitrary system command or disrupt service...

CVE-2022-39039

aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTPs request to launch Server-Side Request Forgery SSRF attack, to perform arbitrary system command or disrupt service...

CVE-2022-40740

Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...