6243 matches found
openssl: EDIPARTYNAME NULL pointer de-reference
A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...
Information Disclosure Vulnerability in Shentong's Large General Database
Tianjin Shenzhou General Data Technology Co., Ltd referred to as "Shenzhou General", belongs to China Aerospace Science and Technology Corporation CASC. It is a professional company engaged in the research and development of databases, big data solutions and data mining analysis products in China...
Information Disclosure Vulnerability in Shentong Large General Database (CNVD-2021-05382)
Tianjin Shenzhou General Data Technology Co., Ltd referred to as "Shenzhou General", belongs to China Aerospace Science and Technology Corporation CASC. It is a professional company engaged in the research and development of databases, big data solutions and data mining analysis products in China...
Fedora: Security Advisory for awstats (FEDORA-2020-4cba5f2846)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GE Reason RT430 Clock Code Injection Vulnerability
The GE Reason RT430 Clock is a precision clock device from General Electric GE that references GPS and GLONASS satellites. A security vulnerability exists in multiple GE products where an authenticated, remote attacker could execute arbitrary code on the system or intercept and decrypt encrypted...
Various GE products are vulnerable to trust management issues
GE Grid Solutions Reason RT Clocks RT430 and others are a precision time synchronization unit from General Electric GE. GE Grid Solutions Reason RT Clocks RT430, RT431 & RT434 All firmware versions prior to Version 08A06 contain a security vulnerability that could allow an authenticated, remote...
GLSA-202012-13 : OpenSSL: Denial of service
The remote host is affected by the vulnerability described in GLSA-202012-13 OpenSSL: Denial of service A NULL pointer dereference flaw was found in OpenSSL. Impact : A remote attacker, able to control the arguments of the GENERALNAMEcmp function in an application linked against OpenSSL, could...
PayloadsAllTheThings
It is an offensive tool for general-purpose payloads. The repository lpker123/PayloadsAllTheThings contains various payloads for different purposes, but no specific exploit or vulnerability is mentioned. The provided code snippet is a funding.yml file, which lists supported funding platforms for...
openssl: EDIPARTYNAME NULL pointer de-reference
A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...
openssl: EDIPARTYNAME NULL pointer de-reference
A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...
openssl: EDIPARTYNAME NULL pointer de-reference
A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...
U.S. General Services Administration: Unauthorized access to employee panel with default credentials.
Summary: Hello, When hunting for your web application. I have managed to go https://cars.fas.gsa.gov/cars/cars and get displayed with a form. I have already tried to login to Cars and without success. However i've noticed the loginChk function and change the value of the form hence bypassing it a...
openssl: EDIPARTYNAME NULL pointer de-reference
A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...
openssl: EDIPARTYNAME NULL pointer de-reference
A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...
openssl: EDIPARTYNAME NULL pointer de-reference
A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...
The California Privacy Rights Act (CPRA)
The California Privacy Rights Act CPRA was passed in November by voters in California. Adding another entry to the alphabet soup that is privacy regulations, the CPRA known as Proposition 24 when it was on the ballot expands on the states landmark consumer privacy law, the California Consumer...
48 U.S. States and FTC are suing Facebook for illegal monopolization
The US Federal Trade Commission and a coalition of 48 state attorneys general on Wednesday filed a pair of sweeping antitrust suits against Facebook, alleging that the company abused its power in the marketplace to neutralize competitors through its acquisitions of Instagram and WhatsApp and...
Russian APT28 Hackers Using COVID-19 as Bait to Deliver Zebrocy Malware
A Russian threat actor known for its malware campaigns has reappeared in the threat landscape with yet another attack leveraging COVID-19 as phishing lures, once again indicating how adversaries are adept at repurposing the current world events to their advantage. Linking the operation to a...
CVE-2020-1971 EDIPARTYNAME NULL pointer dereference
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...
Fedora: Security Advisory for xorg-x11-server (FEDORA-2020-e82f9b80eb)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...