PT-2024-1187 · Oracle · Oracle Integrated Lights Out Manager

Name of the Vulnerable Software and Affected Versions: Oracle Integrated Lights Out Manager ILOM versions 3 through 5 Description: The issue is related to insufficient input validation in the System Management component of Oracle Integrated Lights Out Manager ILOM. This easily exploitable...

EulerOS 2.0 SP9 : busybox (EulerOS-SA-2023-2873)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2023-3002)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2023-3025)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2023-3166)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

EulerOS 2.0 SP9 : busybox (EulerOS-SA-2023-2892)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2023-3201)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

Anonymous Sudan Claims London Internet Exchange Attack Over Yemen Strikes

By Deeba Ahmed Anonymous Sudan is a pro-Russia hacktivist group, and their emergence aligns with the rise of other pro-Russian cyber actors since the beginning of the Ukraine war. This is a post from HackRead.com Read the original post: Anonymous Sudan Claims London Internet Exchange Attack Over...

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway, which stems from insufficient validation of input data, allows a intruder to alter the IP configuration and trigger a service failure.

The vulnerability of the SIMATIC CN 4100 communication gateway’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to alter the IP configuration and cause service failures...

Apache IoTDB Security Vulnerabilities

Apache IoTDB is an integrated data management engine designed for time series data from the Apache Foundation USA, which provides data collection, storage and analysis services, among others. A security vulnerability exists in Apache IoTDB versions 1.0.0 through 1.2.2, which can be exploited by a...

[SECURITY] Fedora 38 Update: ppp-2.4.9-10.fc38

The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion

The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data leak site on the dark web in February 2023 to publish sensitive data of victims who are unwilling to agree to their demands. "As part of their multi-extortion strategy,...

[SECURITY] Fedora 39 Update: exim-4.97.1-1.fc39

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

[SECURITY] Fedora 38 Update: exim-4.97.1-1.fc38

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

[SECURITY] Fedora 38 Update: tigervnc-1.13.1-9.fc38

Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...

CVE-2023-51969

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo...

CVE-2023-51958

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv...

CVE-2023-51955

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv...

CVE-2023-51961

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv...

CVE-2023-41603

D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6...