CVE-2021-3330

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions = =2.4.0 contain Out-of-bounds Write CWE-787. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456...

Out-of-bounds

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions = =2.4.0 contain Out-of-bounds Write CWE-787. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456...

CVE-2021-3330 RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions = =2.4.0 contain Out-of-bounds Write CWE-787. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456...

CVE-2021-3330

The CVE-2021-3330 entry describes an RCE/DOS condition in Zephyr caused by linked-list corruption that leads to a large out-of-bounds write while sorting forged fragment lists. Affected: Zephyr RTOS, with a note that versions >= 2.4.0 are affected by an Out-of-bounds Write (CWE-787). Root caus...

Microsoft Warns of Iran-Linked Hackers Targeting US and Israeli Defense Firms

An emerging threat actor likely supporting Iranian national interests has been behind a password spraying campaign targeting U.S., E.U., and Israeli defense technology companies, with additional activity observed against regional ports of entry in the Persian Gulf as well as maritime and cargo...

CVE-2021-3330: Out-of-bounds Write

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions = =2.4.0 contain Out-of-bounds Write CWE-787. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456...

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center MSTIC first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technolog...

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center MSTIC first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technolog...

CVE-2021-41795

The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable component of this extension, a malicious web page could read a subset of 1Password vault items that would normally be fillable by the user on...

ZOHO ManageEngine ADSelfService Plus has an unspecified vulnerability

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. versions have a security vulnerability that stems from the vulnerability of the system to takeover by linked applications. Detailed...

CVE-2021-37423

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...

Code injection

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...

CVE-2021-37423

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...

CVE-2021-37423

Technical details are not publicly available in the provided documents for CVE-2021-37423; specifics on affected versions, root cause, or mitigations are not disclosed here. Monitor for updates from official advisories.

CVE-2021-37423: Undefined Security Weakness

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...

ZOHO ManageEngine ADSelfService Plus 安全漏洞

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. versions have a security vulnerability that stems from the vulnerability of the system to takeover by linked applications. Detailed...

SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’

The novel backdoor technique called SideWalk, seen in campaigns targeting US media and retailers late last month, has been tied to an adversary that’s been around for quite a while: namely, China-linked Grayfly espionage group. ESET researchers, who named and discovered the new “SparklingGoblin”...

GHSA-R43H-GMRM-H5C9 Access of Uninitialized Pointer in linked-hash-map

An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint...

accepted (>=0.1.13, <=0.1.20), actors-rs (>=0.1.0, <=0.1.4) +325 more potentially affected by CVE-2020-25573 via linked-hash-map (>=0.0.9, <=0.4.2)

linked-hash-map CARGO version =0.0.9, =0.1.13, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.5.0, =0.3.1, =0.3.2, =0.1.0, =0.1.0, =0.7.1 and more Source cves: CVE-2020-25573 Source advisory: OSV:GHSA-R43H-GMRM-H5C9...

Access of Uninitialized Pointer in linked-hash-map

An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint...