Samsung Internet Input Validation Error Vulnerability

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. A security vulnerability exists in Samsung Internet prior to version 13.2.1.46, which can be exploited by an attacker to launch unexported activities in Samsung Browser via a malicious deeplink...

Samsung Internet Access Control Error Vulnerability

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. An access control error vulnerability exists in Samsung Internet, which can be exploited by an attacker to bypass secret mode authentication...

Rockwell Automation FactoryTalk AssetCentre 安全漏洞

Rockwell Automation FactoryTalk AssetCentre is an asset management software tool from Rockwell Automation that allows manufacturers and industrial companies to centrally manage controllers and other automation-related assets. An unspecified vulnerability exists in Rockwell Automation FactoryTalk...

CVE-2021-29662

The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-2523

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

PT-2021-2526

Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersk...

PT-2021-2524

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

PT-2021-2525

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

CVE-2021-29418

The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This in some situations allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for...

File Upload Vulnerability in Xi'an Ice Network Technology Co.

Xi'an Ice and Snow Network Technology Co., Ltd. was established on 07/07/2014. Legal representative Gai Bing, the company's scope of business includes: web design, computer system design, computer technical services and technical consulting; Internet information services, computer hardware and...

ACRN Null Pointer Dereference Vulnerability

ACRN is an open source virtual machine monitor for the Internet of Things. ACRN suffers from a security vulnerability that stems from devicemodel/hw/pci/virtio/virtio.c null pointer dereference. No details of the vulnerability are provided at this time...

PT-2021-2662

Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Security Cloud affected versions not specified Kaspersky Small...

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software lies in the fact that the output operation goes beyond the buffer in memory, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a speciall...

(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the iSCSI subsystem in Linux operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data through specially created Netlink messages...

CVE-2021-29424

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-21727

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

CVE-2021-21727

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

Why you need to trust your VPN: Lock and Code S02E05

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we speak to Malwarebytes senior security researcher JP Taggart about the importance of trusting your VPN. Youve likely heard the benefits of using a VPN: You can watch TV shows restricted ...

ZTE ZXHN F623 安全漏洞

The ZTE ZXHN F623 is a wireless router from ZTE China. It is used to provide Internet access. A security vulnerability exists in the ZTE ZXHN F623, which can be exploited by an attacker to amplify traffic by sending a well-constructed IPv6 message to the affected device, ultimately resulting in a...