LTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper

LTESniffer is An Open-source LTE Downlink/Uplink Eavesdropper It first decodes the Physical Downlink Control Channel PDCCH to obtain the Downlink Control Informations DCIs and Radio Network Temporary Identifiers RNTIs of all active users. Using decoded DCIs and RNTIs, LTESniffer further decodes t...

Intel® Simics Simulator Software Advisory

Summary: A potential security vulnerability in some Intel® Simics Simulator software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-34314 Description: Insecure inherited permissions in some...

Sprecher Automation SPRECON-E TCP SACK PANIC (CVE-2019-11478)

Jonathan Looney discovered that the TCP retransmission queue implementation in tcpfragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment SACK sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel...

Sprecher Automation SPRECON-E TCP SACK PANIC (CVE-2019-11479)

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kerne...

Sprecher Automation SPRECON-E TCP SACK PANIC (CVE-2019-11477)

Jonathan Looney discovered that the TCPSKBCBskb-tcpgsosegs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments SACKs. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182,...

Deadglyph Malware Emerges as a Game Changer for Stealth Falcon

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The cyber espionage group Stealth Falcon commenced covert operations and employed advanced backdoor malware called "Deadglyph" primarily to infiltrate Middle Eastern government entities. To receive...

Deadglyph: New Advanced Backdoor with Distinctive Malware Tactics

Cybersecurity researchers have discovered a previously undocumented advanced backdoor dubbed Deadglyph employed by a threat actor known as Stealth Falcon as part of a cyber espionage campaign. "Deadglyph's architecture is unusual as it consists of cooperating components – one a native x64 binary,...

CBL Mariner 2.0 Security Update: rubygem-protocol-http1 (CVE-2023-38697)

The version of rubygem-protocol-http1 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38697 advisory. - protocol-http1 provides a low-level implementation of the HTTP/1 protocol. RFC 9112 Section...

falcon-parts.cz Cross Site Scripting vulnerability OBB-3621634

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-27523

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface...

Design/Logic Flaw

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface...

CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32547

The CVE-2023-32547 issue affects MAVinci Desktop Software for Intel® Falcon 8+ prior to version 6.2. The root cause is incorrect default permissions in the MAVinci Desktop software, which could allow an authenticated local user to escalate privileges. CVSS vectors indicate a local attack with low...

CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-27523

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface...

PT-2023-23868 · Intel · Mavinci Desktop

Name of the Vulnerable Software and Affected Versions: MAVinci Desktop Software for IntelR Falcon 8+ versions prior to 6.2 Description: The issue is related to incorrect default permissions in the software, which may allow an authenticated user to potentially enable escalation of privilege via...

CVE-2021-27523

The CVE-2021-27523 entry pertains to the Open-Falcon dashboard (version 0.2.0). The vulnerability is described as a flaw in the register interface that allows remote attackers to gain, modify, and delete sensitive information via a crafted POST request. The available connected documents confirm a...