The vulnerability of the PARSEC security library function, related to insufficient data processing within the security mechanisms, allows a attacker to trigger a service failure.

The vulnerability of the PARSEC security library function is related to a failure in disabling file system protection. Exploiting this vulnerability allows an attacker to cause a service failure...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2021-2082)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the astra-safepolicy security configuration software, related to access control deficiencies. Exploiting this vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the astra-safepolicy security configuration software relates to the disabling of the MAC mode. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2021-2126)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the fly-admin-gmc graphical control console lies in the insufficient processing of data within the security mechanisms, allowing an intruder to access confidential data.

The vulnerability of the fly-admin-gmc graphical control console is related to the incorrect display of settings for non-privileged users. Exploiting this vulnerability allows a hacker to gain access to confidential data...

Microsoft Edge’s browser vulnerability, related to security mechanism flaws, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to security flaws in its mechanisms. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

The vulnerability of the elFinder file manager stems from the incorrect implementation of authentication mechanisms, allowing attackers to execute arbitrary code.

The vulnerability of the elFinder file manager is related to the unlimited loading of files of a dangerous type. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created .phar file...

USN-4995-2 thunderbird vulnerabilities

USN-4995-1 fixed vulnerabilities in Thunderbird. This update provides the corresponding updates for Ubuntu 18.04 LTS. Original advisory details: Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an...

One-Click Exploit Could Have Let Attackers Hijack Any Atlassian Account

Cybersecurity researchers on Wednesday disclosed critical flaws in the Atlassian project and software development platform that could be exploited to take over an account and control some of the apps connected through its single sign-on SSO capability. "With just one click, an attacker could have...

Atlassian Bugs Could Have Led to 1-Click Takeover

Atlassian, a platform used by 180,000 customers to engineer software and manage projects, could have been hijacked with a single click due to security flaws, researchers have disclosed. On Thursday, Check Point Research CPR published a report PDF outlining how an attacker could have exploited the...

Unpatched flaws exposing Linux marketplaces to remote attacks

By Waqas The vulnerabilities remain unpatched and can be exploited to launch supply-chain attacks or achieve RCE against Linux marketplaces. This is a post from HackRead.com Read the original post: Unpatched flaws exposing Linux marketplaces to remote attacks...

The vulnerability of the polkit_system_bus_name_get_creds_sync() function in the dbus-daemon daemon of the Polkit library allows a attacker to escalate their privileges.

The vulnerability of the polkitsystembusnamegetcredssync function in the dbus-daemon daemon of the Polkit library is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to enhance their privileges...

NVIDIA Jetson Chipsets Found Vulnerable to High-severity Flaws

U.S. graphics chip specialist NVIDIA has released software updates to address a total of 26 vulnerabilities impacting its Jetson system-on-module SOM series that could be abused by adversaries to escalate privileges and even lead to denial-of-service and information disclosure. Tracked from...

Prominent defibrillator management tool exposed to remote attacks

By Deeba Ahmed High-Risk security flaws found and patched in ZOLL defibrillator management software. Here's what happened and what was vulnerable. This is a post from HackRead.com Read the original post: Prominent defibrillator management tool exposed to remote attacks...

Internet Bug Bounty: Fragmentation and Aggregation Flaws in Wi-Fi

I discovered three design flaws in the Wi-Fi standard and widespread related implementation flaws see GitHub overview and test tool. Here I'll specifically cover open source software. These findings have not received bug bounties from other sources. Implementation flaws allowing trivial packet...

N Korean hackers used VPN flaws to breach S Korean atomic agency

By Deeba Ahmed Korea Atomic Energy Research Institute KAERI has disclosed that its internal network suffered a cyber attack by hackers from North Korea. This is a post from HackRead.com Read the original post: N Korean hackers used VPN flaws to breach S Korean atomic agency...

The vulnerability of NFS servers in Microsoft Windows systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of NFS servers on Microsoft Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the PackageKit package for the Aurora operating system, related to authentication flaws, allows attackers to escalate their privileges.

The vulnerability of PackageKit in the Aurora operating system is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2021-34202

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remo...

USN-4989-1 bluez vulnerabilities

It was discovered that BlueZ incorrectly checked certain permissions when pairing. A local attacker could possibly use this issue to impersonate devices. CVE-2020-26558 Jay LV discovered that BlueZ incorrectly handled redundant disconnect MGMT events. A local attacker could use this issue to caus...