PT-2021-16541

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 13.0.1.60 Description: The issue is related to an improper permission grant check, allowing access to files in internal storage without the authorized STORAGE permission. This affects Samsung Internet,...

Samsung Internet 安全漏洞

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. A security vulnerability exists in Samsung Internet versions prior to 13.0.1.60, which stems from allowing access to internally stored files. No details of the vulnerability are provided at this...

CVE-2021-25348: Improper Check or Handling of Exceptional Conditions

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

Update to Alert on Mitigating Microsoft Exchange Server Vulnerabilities

CISA is aware of threat actors using open source tools to search for vulnerable Microsoft Exchange Servers and advises entities to investigate for signs of a compromise from at least September 1, 2020. CISA has updated the Alert on the Microsoft Exchange server vulnerabilities with additional...

OPENSUSE-SU-2021:0376-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.30.5 bsc1182286: + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk fo...

SQL Injection Vulnerability in Intelligent Internet of Things System of Nanjing Jiuzhe Software Technology Co.

JiuZe Technology is a mobile Internet customized software service provider, providing enterprise customers with one-stop mobile Internet solutions from product planning, conceptual design to software delivery, operation and promotion. SQL injection vulnerability exists in the intelligent Internet...

PT-2021-2260 · Cisco · Cisco Asr 5000 Series

Name of the Vulnerable Software and Affected Versions: Cisco ASR 5000 Series Software StarOS affected versions not specified Description: A vulnerability in the ipsecmgr process could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This issue is due to...

The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges

The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the ICMP packet processing service in the NX-OS operating system allows a hacker to induce a service failure.

The vulnerability of the ICMP packet processing service in the NX-OS operating system is related to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the IPv6 implementation of the Cisco NX-OS network operating system for Cisco routers allows a attacker to cause a service failure.

The vulnerability of the IPv6 implementation of the Cisco NX-OS network operating system’s Cisco routers is related to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

Is Your Browser Extension a Botnet Backdoor?

A company that rents out access to more than 10 million Web browsers so that clients can hide their true Internet addresses has built its network by paying browser extension makers to quietly include its code in their creations. This story examines the lopsided economics of extension development,...

What Life Is Like Under Myanmar's Internet Shutdown

One couple living in Yangon explain the impact of the military coup's terrifying censorship measures...

Defending online anonymity and speech with Eva Galperin: Lock and Code S02E03

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we talk to Eva Galperin, director of cybersecurity for Electronic Frontier Foundation, about the importance of protecting online anonymity and speech. In January, the New York Times expose...

HPESBUX04095 rev.1 - HP-UX Internet Express Software, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Internet Express System Software A.20.00-A.23.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

Citrix SDWAN: Local internet breakout traffic is always been sent via Secondary link despite Primary link is up.

Customer has two WAN links bound to Internet Services. One link is Primary and another links is Secondary. The internet traffic is always going via Secondary WAN link despite Primary link is UP. Due to this, when Secondary link goes down, the internet access is getting lost for all the users...

Scytl sVote 安全漏洞

Scytl sVote is a Spanish Scytl open source application. Provides voters to vote online. A security vulnerability exists in Scytl sVote 2.1, which can be exploited by attackers to inject incorrect IP addresses into logs...

CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability...

GHSA-QFMR-6QVH-49GM XSS

Withdrawn: Duplicate of GHSA-vcjj-xf2r-mwvc. Knockout, before 3.5.0-beta, has an XSS injection point in attr name binding for browser IE7 and older...

The vulnerability in the implementation of IPSec protocols for the HiLCOS operating system in wireless access points OpenBAT and BAT450-F allows a hacker to circumvent firewall policies.

The vulnerability of the implementation of IPSec protocols in the HiLCOS operating system for wireless access points OpenBAT and BAT450-F is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent firewall policies from a remote...

Tax Season Ushers in Quickbooks Data-Theft Spike

Cybercriminals are ready for tax season with new malware designed to exfiltrate Quickbooks data and post it on the internet, according to a new report from ThreatLocker. Attackers use email to deliver the malware, which the ThreatLocker’s CEO Danny Jenkins told Threatpost is a simple, 15-line pie...