The vulnerability of the Android EMUI operating system’s shell, which arises due to insufficient validation of input data, allows a hacker to disclose protected information or cause service failures.

The vulnerability of the Android EMUI operating system’s shell exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of the HarmonyOS operating system’s kernel, related to writing beyond buffer boundaries in memory, allows a attacker to trigger a service failure or disclose sensitive information.

The vulnerability of the HarmonyOS operating system is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information...

The vulnerability of the software packet-processing function of the Cisco Wireless Control Unit (EWC) allows a intruder to cause a service failure.

The vulnerability of the software packet-processing function of the Cisco Ethernet Wireless Controller EWC allows for resource management errors to be exploited. Exploiting this vulnerability could enable a malicious actor to cause service interruptions remotely...

The vulnerability of the communication standard set for IEEE 802.11 by the computer network traffic analyzer Wireshark allows a hacker to cause a service failure.

The vulnerability of the IEEE 802.11 communication standard set for computer network traffic analyzers like Wireshark is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by injecting specially crafted packets...

Google Takes Down Glupteba Botnet; Files Lawsuit Against Operators

Google’s Threat Analysis Group TAG has disrupted the blockchain-enabled botnet known as Glupteba, which is made up of around 1 million compromised Windows and internet of things IoT devices. In tandem, Google also filed a lawsuit against the botnet’s operators. Glupteba, already a formidable...

CVE-2021-22956

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

Design/Logic Flaw

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22956

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22955

A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures lies in their lack of access control mechanisms. This allows attackers to escalate their privileges, gain unauthorized access to protected information, or cause service failures.

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges, gain unauthorized access to protected information, or caus...

The vulnerability of the Internet Key Exchange (IKEv2) implementation of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKEv2 implementation of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sendi...

The vulnerability of the Apache HTTP Server’s web server, related to the assignment of the zero pointer, allows attackers to trigger a service failure.

The vulnerability of the Apache HTTP Server web server is related to the assignment of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions through specially crafted HTTP requests...

The vulnerability of the newusers tool in the shadow account management utility allows for data leakage when operations are performed outside of the buffer in memory. This enables attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the newusers tool in the shadow account management utility is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Packet Forwarding Engine manager (FXPC) component in the Junos operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine manager FXPC component in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

The vulnerability of the MAP-E automatic tunneling mechanism in the Junos operating system, which allows a hacker to trigger a service failure.

The vulnerability of the MAP-E automatic tunneling mechanism in the Junos operating system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

The vulnerability of the shadow account management tool is related to insecure management of privileges, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shadow account management tool is related to the incorrect specification of pts/o and pts/1 as physical terminals in the /etc/securetty file. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

NICKEL targeting government organizations across Latin America and Europe

The Microsoft Threat Intelligence Center MSTIC has observed NICKEL, a China-based threat actor, targeting governments, diplomatic entities, and non-governmental organizations NGOs across Central and South America, the Caribbean, Europe, and North America. MSTIC has been tracking NICKEL since 2016...

Pandemic-Influenced Car Shopping: Just Use the Manufacturer API

The pandemic has caused huge disruptions in the supply chain for a wide variety of industries. One of the major areas feeling the global issues is the car industry. Fortunately, I found a way to exploit a manufacturer API to minimize my frustration. First, some background: Many outlets have widel...

CVE-2021-40334

Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...

Improper access control

Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...