GSD-2022-1003004 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002663 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31207

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to the allocation of table perturb in the tcp module, where the function alloc large system hash is used. The actual impact and attack plausibility have not yet been...

PT-2022-30926

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.18.3 Description The issue is related to the cleanup of hash direct functions on register failures in ftrace. It was introduced in version v5.5 and fixed in version v5.18.3. The actual impact and attack...

PT-2022-30846

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the allocation of table perturb in the tcp module, where alloc large system hash is used. The actual impact and attack plausibility have not yet been proven...

PT-2022-31267

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.17.13 Description The issue is related to the cleanup of hash direct functions on register failures in ftrace. It was introduced in version v5.5 and fixed in version v5.17.14. The actual impact and attack...

PT-2022-31571

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the cleanup of hash direct functions on register failures in ftrace. It was introduced in version v5.5 and fixed in version v5.15.46. The actual impact and attack...

ruby:fuzz_ruby_gems: Crash in hash_table_index

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5928375971086336 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000007d3b Crash State:...

CVE-2022-1666

The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...

CVE-2022-1666

The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...

CVE-2022-1740

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...

Default credentials

The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...

Design/Logic Flaw

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...

CVE-2022-1666 Secheron SEPCOS Control and Protection Relay

The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...

CVE-2022-1666 Secheron SEPCOS Control and Protection Relay

The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...

CVE-2022-1666

CVE-2022-1666 affects Secheron SEPCOS Control and Protection Relay. The root cause is insufficiently protected credentials: the web app’s root account uses a weak default password, with MD5-based cracking noted. This can allow an attacker with network access to obtain OS/root-level privileges on ...

CVE-2022-1666: Insufficiently Protected Credentials

The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...

WEF - Wi-Fi Exploitation Framework

A fully offensive framework to the 802.11 networks and protocols with different types of attacks for WPA and WEP, automated hash cracking, bluetooth hacking and much more. I recommend you my alfa adapter: Alfa AWUS036ACM , which works really great with both, 2.4 and 5 Ghz Tested and supported in...

Malicious Package

Overview insomnia-plugin-simple-hmac-auth is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable ...

Secheron SEPCOS Control and Protection Relay 安全漏洞

Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.The Secheron SEPCOS Control and Protection Relay is vulnerable to an...