CVE-2021-34855

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

DOS By Front Running DelegatedStaking initialize

Handle elprofesor Vulnerability details Impact DelegatedStaking utilizes the ERC1967 upgradeable proxy standard. This relies on an implementation contract being deployed and then reused or consumed by a proxy contract. As proxy contracts are unable to leverage a constructor they typically use an...

Updated libslirp packages fix security vulnerability

Invalid pointer initialization issues were found in the SLiRP networking implementation of QEMU. In the bootpinput function while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory fr...

GSD-2021-1001708 KVM: x86: Handle SRCU initialization failure during page track init

KVM: x86: Handle SRCU initialization failure during page track init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001635 KVM: x86: Handle SRCU initialization failure during page track init

KVM: x86: Handle SRCU initialization failure during page track init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

UVI-2021-1001635 KVM: x86: Handle SRCU initialization failure during page track init

KVM: x86: Handle SRCU initialization failure during page track init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

PT-2021-30091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists where a use-after-free error can occur when BO initialization fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a use-after-free error when BO initialization fails. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions pri...

PT-2021-30173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.10 Description The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

PT-2021-30154

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a use-after-free condition that occurs when BO initialization fails. This problem was introduced in version v5.4 and is fixed in Linux Kernel version v5.14.12...

PT-2021-26178

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

PT-2021-26105

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

PT-2021-26096

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists where a use-after-free error can occur when BO initialization fails. The actual impact and likelihood of an attack have not been confirmed. Recommendations For Linux...

PT-2021-30100

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the handling of SRCU initialization failure during page track initialization in KVM x86. The actual impact and attack plausibility have not yet been proven...

Exploit for Improper Initialization in Docker

sectoolset -- Github安全相关工具集合 主要内容： 0x00 漏洞利用实战练习&CTF安全竞赛 0x01 安全扫描器 0x02 安全防守 0x03 渗透测试 0x04 漏洞库及利用工具（POC，EXP 0x05 二进制及代码分析工具 0x06 威胁情报&蜜罐 0x07 安全文档资料 0x11 所有内容 乌云镜像 乌云镜像 乌云镜像,河蟹 近期安全热点 Microsoft 365 Defender研究团队和威胁情报中心（MSTIC）的SolarWinds攻击分析文章 OpenSSL 拒绝式攻击严重漏洞CVE-2020-1971 安全论文：《Measuring and...

Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

macOS watchOS iOS iPadOS Information Disclosure

The vulnerabilities of operating systems macOS, watchOS, iOS, and iPadOS are related to initialization errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that is protected by security measures...

Linux kernel Device Initialization Heap Buffer Overflow DoS

The vulnerability of the hcidevdoopen function in the Linux kernel’s device initialization subsystem is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause a service failure using the malicious HCI TTY Bluetooth device...

XSA-365 Linux DoS

The vulnerability of the XSA-365 component in the Linux operating system is related to incorrect data initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Initialize can be called multiple times!!!!

Handle pants Vulnerability details Initialize can be called multiple times. Initialize function must be called only by the contract owner and only once for safety. line 74 --- The text was updated successfully, but these errors were encountered: All reactions...