CVE-2021-3506

An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The...

SUSE: Security Advisory (SUSE-SU-2015:0688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-11139 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the spi-zynqmp-gqspi controller in the Linux kernel, which supports 44-bit address space on AXI in DMA mode. If the dma map single function fails, it...

Exploit for Use After Free in Adobe Flash_Player

Awesome CobaltStrike 0x00 前言 1. 一部分是近期做RedTeam项目的时候看到的一些关于CobaltStrike不错的文章 2. 目前网上的Aggressor Script种类繁多，大多数资源的聚合都是只给出对应的链接，而不说明是干什么的，以至于在查看时不知道如何选择，要一个一个打开看 3. 关于新特性BOF资源的整合 4. 解决要用的时候找不到合适aggressor script或者BOF的问题 5. 如果有本repo没有涉及的优质内容，欢迎大家提交pr 0x01 相关文章合集 基础知识参考： 1. CobaltStrikewiki 2...

April 13, 2021—KB5001342 (OS Build 17763.1879)

None None...

April 13, 2021—KB5001347 (OS Build 14393.4350) - EXPIRED

None None...

April 13, 2021—KB5001337 (OS Build 18363.1500)

None None...

April 13, 2021—KB5001330 (OS Builds 19041.928 and 19042.928)

None None...

April 13, 2021—KB5001340 (OS Build 10240.18906)

None None...

Incorrect Stability Assumption

Handle 0xsomeone Vulnerability details Impact An arbitrage opportunity presents itself whereby a user can exaggerate the discrepancy via flash loans between the USDC price reported and the actual USDC price to f.e. acquire a better rate for their loan. The impacted features of the system can be...

The First User To Borrow a Particular Token Can Drain Funds In MarginSwap by Making An Undercollateralized Borrow Using Flash Loans

Handle jvaqa Vulnerability details The First User To Borrow a Particular Token Can Drain Funds In MarginSwap by Making An Undercollateralized Borrow Using Flash Loans Impact This attack can be performed with any two ERC20 tokens, where one of them has not yet been borrowed on MarginSwap. Since an...

CVE-2020-11924

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device...

Information disclosure

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device...

CVE-2020-11924

The CVE-2020-11924 entry affects WiZ Colors A60 (firmware 1.14.0). The root cause is that Wi‑Fi credentials are stored in cleartext in flash memory, creating an information‑disclosure risk if the device is discarded or resold. No exploitation details are provided in the documents. Remediation is ...

CVE-2020-11924

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device...

PT-2021-9430 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where Wi-Fi credentials are stored in cleartext in flash memory. This presents an information-disclosure risk for a discarded or resold device. Recommendations: For WiZ Colors...

Unauthorized Access Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. An unauthorized access vulnerability exists in the flash flood monitoring and early warning system of Chengdu Wanjiang...

WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from the Chinese company WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0, which stems from Wi-Fi credentials being stored in plaintext in flash memory...

March 29, 2021—KB5000842 (OS Builds 19041.906 and 19042.906) Preview

None None...

PT-2024-11108 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the f2fs file system in the Linux kernel. In CP disabling mode, there are two issues when using LFS or SSR | AT SSR mode to select a victim. The first issue is...