WithSecure products 安全漏洞

WithSecure products is a line of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure that stems from a denial-of-service DoS vulnerability found in the fsicapd component, which could cause the service to crash while parsing ICAP requests...

CVE-2022-45043

Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...

USN-5756-3 linux-azure, linux-azure-5.4 vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

Internet Explorer Zero-Day Vulnerability Exploited by APT 37

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary North Korean hackers identified as APT37 exploited a previously unknown Internet Explorer zero-day vulnerability to infect South Koreans, North Korean defectors, policymakers, journalists, and human righ...

CVE-2022-45043

Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...

The vulnerability of the Cisco Discovery protocol processing function in the microprogramming software of Cisco IP Phones 7800 and 8800 allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the Cisco Discovery protocol processing function in the microprogramming software of Cisco IP Phones 7800 and 8800 is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by...

Tenda AX12 操作系统命令注入漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.16cn, which originates from a command injection vulnerability via goform/fastsettinginternetset...

Log4j’s Log4Shell Vulnerability: One Year Later, It’s Still Lurking

Despite mitigation, one of the worst bugs in internet history is still prevalent—and being exploited...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

Google Warns of Internet Explorer Zero-Day Vulnerability Exploited by ScarCruft Hackers

An Internet Explorer zero-day vulnerability was actively exploited by a North Korean threat actor to target South Korean users by capitalizing on the recent Itaewon Halloween crowd crush to trick users into downloading malware. The discovery, reported by Google Threat Analysis Group researchers...

Iranian Hackers Strike Diamond Industry with Data-Wiping Malware in Supply-Chain Attack

An Iranian advanced persistent threat APT actor known as Agrius has been attributed as behind a set of data wiper attacks aimed at diamond industries in South Africa, Israel, and Hong Kong. The wiper, referred to as Fantasy by ESET, is believed to have been delivered via a supply-chain attack...

daloRADIUS 安全漏洞

daloRADIUS is an advanced RADIUS web management application from Liran Tal Personal Developer. It is designed to manage hotspot and universal ISP deployments. A security vulnerability exists in daloRADIUS, which originates from the exposure of sensitive system information to unauthorized control...

Main phishing and scamming trends and techniques

There are two main types of online fraud aimed at stealing user data and money: phishing and scams. Phishers primarily seek to extract confidential information from victims, such as credentials or bank card details, while scammers deploy social engineering to persuade targets to transfer money on...

DEBIAN-CVE-2022-43548

A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.Th...

Zabbix 安全漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix, which can be exploited by an attacker to bypass this protection and access instances using IP...

Neton - Tool For Getting Information From Internet Connected Sandboxes

Neton is a tool for getting information from Internet connected sandboxes. It is composed by an agent and a web interface that displays the collected information. The Neton agent gets information from the systems on which it runs and exfiltrates it via HTTPS to the web server. Some of the...

Security Bulletin: IBM MQ Internet Pass-Thru traces sensitive data (CVE-2022-35719)

Summary An issue was found within IBM MQ Internet Pass-Thru which causes sensitive data to be written to trace files when trace is enabled. Vulnerability Details CVEID:CVE-2022-35719 DESCRIPTION: IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace...

The vulnerability of the pr_pack() function in the ping utility of the FreeBSD operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the prpack function in the ping utility of the FreeBSD operating system arises from buffer overflows in the stack during the processing of ICMP messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

GL.iNet GoodCloud 安全漏洞

GL.iNet GoodCloud is an Internet of Things IoT device management system from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in GL.iNet GoodCloud version 1.1, which stems from incorrect access control...

Qualys Broadens Security Offerings for Oracle Cloud Infrastructure

As organizations increase their use of public cloud platforms, they encounter cloud-specific security and compliance threats, which can be challenging to address without the right tools and processes. Organizations’ cloud security difficulties lie in two main areas: Lack of visibility into their...