38946 matches found
Multiple vulnerabilities in KINGSOFT "WPS Office" and "KINGSOFT Internet Security"
Overview "WPS Office" and "KINGSOFT Internet Security" provided by KINGSOFT JAPAN, INC. contain multiple vulnerabilities listed below. Stack-based buffer overflow CWE-121 - CVE-2022-25949 Insecurely loading Dynamic Link Libraries CWE-427 - CVE-2022-26081, CVE-2022-25969, CVE-2022-26511 These...
ISC BIND 安全漏洞
ISC BIND is a suite of open source software from ISC Corporation that implements the DNS protocol. A security vulnerability exists in ISC BIND, which stems from a timeout or artificially delayed fetch when tracing DS records that could cause "named" to crash when resuming a DS lookup...
The vulnerability in the implementation of the TCP/IP protocol stack for Linux-based operating systems allows a hacker to cause a service failure.
The vulnerability of the TCP/IP protocol stack implementation in Linux-based operating systems is related to errors in processing ICMPv6 packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
KINGSOFT Internet Security 缓冲区错误漏洞
KINGSOFT Internet Security Kingsoft AntiVirus is an anti-virus program from the Chinese company KINGSOFT. A security vulnerability exists in KINGSOFT Internet Security 9 Plus version 2010.06.23.247, which originates from the presence of a boundary error in the software that results in a stack-bas...
The vulnerability of the skb_page_frag_refill parameter in the implementation of the Linux-based operating system kernel for IPSec protocols allows a attacker to cause a service failure.
The vulnerability of the “skbpagefragrefill” parameter in the implementation of the Linux-based operating system’s IPSec kernel protocol is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
samba bug fix and enhancement update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fixes and Enhancements: Samba 4.14.5 - virusfiltervfsopenat: Not...
Linux kernel安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable to a denial-of-service vulnerability that stems from a memory leak in the ICMPv6 network protocol stack. An attacker could exploit the vulnerability by generating and sending...
Russia Issues Its Own TLS Certs
Russia is offering its own trusted Transport Layer Security TLS certificate authority CA to replace certificates that need to be renewed by foreign countries. As it is, a pile of sanctions imposed in the wake of Russia’s invasion of Ukraine is gumming up its citizen’s access to websites. As it is...
Debian DLA-2943-1 : ruby-sidekiq - LTS security update
The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2943 advisory. - Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used. CVE-2021-30151 - In api.rb in...
CVE-2022-24726
Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, istiod, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in the control plane crashing when the...
CVE-2022-24726 Unauthenticated control plane denial of service attack in Istio
Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, istiod, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in the control plane crashing when the...
CVE-2022-25214
Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...
CVE-2022-23266
Microsoft Defender for IoT Elevation of Privilege Vulnerability...
CVE-2022-23265
Microsoft Defender for IoT Remote Code Execution Vulnerability...
Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times
Threat actors have been observed abusing a high-impact reflection/amplification method to stage sustained distributed denial-of-service DDoS attacks for up to 14 hours with a record-breaking amplification ratio of 4,294,967,296 to 1. The attack vector – dubbed TP240PhoneHome CVE-2022-26143 – has...
Phicomm多款产品安全漏洞
PHICOMM K2 and others are products of PHICOMM, a China-based company.PHICOMM K2 is a wireless router.PHICOMM K3 is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band...
The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to improper code generation, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
Internet Backbone Giant Lumen Shuns .RU
Lumen Technologies, an American company that operates one of the largest Internet backbones and carries a significant percentage of the worlds Internet traffic, said today it will stop routing traffic for organizations based in Russia. Lumens decision comes just days after a similar exit by...
Using Radar to Read Body Language
Yet another method of surveillance: Radar can detect you moving closer to a computer and entering its personal space. This might mean the computer can then choose to perform certain actions, like booting up the screen without requiring you to press a button. This kind of interaction already exist...
