Mozilla: MediaError message property could have leaked information about cross-origin resources

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

Medium: openssl

Issue Overview: Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1...

Security Vulnerabilities fixed in Thunderbird 78.8 — Mozilla

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

Apache Struts Code Execution

The vulnerability of the Apache Struts software framework exists due to incorrect processing of expressions written in the Object Graph Navigation Language OGNL. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PsExec Privilege Escalation

The vulnerability of the remote execution command PsExec is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection lies in privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel Quartus Prime Privilege Escalation

The vulnerability of Intel Quartus Prime Pro and Intel Quartus Prime Standard automated design systems is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Windows Event Tracing DoS

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows Event Tracing Privilege Escalation

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Exchange Server Spoofing

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

Wireshark BLIP Protocol DoS

The vulnerability of the BLIP protocol analyzer in Wireshark is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Windows operating systems are Security Bypass

Vulnerabilities of Windows operating systems are related to security configuration errors. Exploiting these vulnerabilities can allow a malicious actor to bypass existing security measures remotely...

Application control Windows Defender Application Control Bypass

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security measures remotely...

Windows Event Tracing Privilege Escalation

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Azure Kubernetes Privilege Escalation

The vulnerability of Microsoft Azure Kubernetes operating system is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to escalate their privileges remotely...

Microsoft Edge using MDX microVPN to connect to Citrix Gateway is seen to redirect many times unexpectedly

When using Microsoft Edge, you may experience random loading of Bookmarked websites, previously visited websites or other unexpected browser redirects HTTP 302, to websites which the user has not chosen to load at the time. Other errors found on closer log examination may appear similar to the...

DirDar - A Tool That Searches For (403-Forbidden) Directories To Break It And Get Dir Listing On It

bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have Go installed and configured...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9067)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9067 advisory. - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492110 CVE-2021-26930 - xen-scsiback: don't handle error by BUG Jan Beulich...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Microsoft Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-26930

An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later...