PT-2021-30173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.10 Description The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

PT-2021-30091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists where a use-after-free error can occur when BO initialization fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30154

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a use-after-free condition that occurs when BO initialization fails. This problem was introduced in version v5.4 and is fixed in Linux Kernel version v5.14.12...

PT-2021-26159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a use-after-free error when BO initialization fails. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions pri...

PT-2021-26096

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists where a use-after-free error can occur when BO initialization fails. The actual impact and likelihood of an attack have not been confirmed. Recommendations For Linux...

PT-2021-26105

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

PT-2021-26178

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

PT-2021-30100

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

Exploit for Improper Initialization in Docker

sectoolset -- Github安全相关工具集合 主要内容： 0x00 漏洞利用实战练习&CTF安全竞赛 0x01 安全扫描器 0x02 安全防守 0x03 渗透测试 0x04 漏洞库及利用工具（POC，EXP 0x05 二进制及代码分析工具 0x06 威胁情报&蜜罐 0x07 安全文档资料 0x11 所有内容 乌云镜像 乌云镜像 乌云镜像,河蟹 近期安全热点 Microsoft 365 Defender研究团队和威胁情报中心（MSTIC）的SolarWinds攻击分析文章 OpenSSL 拒绝式攻击严重漏洞CVE-2020-1971 安全论文：《Measuring and...

Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

macOS watchOS iOS iPadOS Information Disclosure

The vulnerabilities of operating systems macOS, watchOS, iOS, and iPadOS are related to initialization errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that is protected by security measures...

Linux kernel Device Initialization Heap Buffer Overflow DoS

The vulnerability of the hcidevdoopen function in the Linux kernel’s device initialization subsystem is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause a service failure using the malicious HCI TTY Bluetooth device...

XSA-365 Linux DoS

The vulnerability of the XSA-365 component in the Linux operating system is related to incorrect data initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Initialize can be called multiple times!!!!

Handle pants Vulnerability details Initialize can be called multiple times. Initialize function must be called only by the contract owner and only once for safety. line 74 --- The text was updated successfully, but these errors were encountered: All reactions...

ALPINE-CVE-2021-41617

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with...

OpenSSH security vulnerabilities

OpenSSH OpenBSD Secure Shell is a set of connection tools for secure access to remote computers from the Openbsd Project Group. The tools are an open source implementation of the SSH protocol that supports encryption of all transmissions, effectively blocking eavesdropping, connection hijacking,...

OpenSSH -- OpenSSH 6.2 through 8.7 failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand

OpenBSD Project reports: sshd8 from OpenSSH 6.2 through 8.7 failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or AuthorizedPrincipalsCommandUser directive has been set to run the command as ...

Siemens Solid Edge Viewer OBJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Samba 3.0.0 <= 3.0.1 Vulnerability (CVE-2004-0082)

mksmbpasswd shell script may create accounts with easily guessable passwords. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

CVE-2021-34703

A vulnerability in the Link Layer Discovery Protocol LLDP message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to improper initialization of a...