CVE-2021-0096

Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Stripchat database mess up exposes 200M adult cam models, users’ data

By Waqas StripChat is one of the top five adult cam sites on the internet. Earlier this month, this site suffered a database mess up that leaked sensitive data. This is a post from HackRead.com Read the original post: Stripchat database mess up exposes 200M adult cam models, users data...

HPESBST04210 rev.1 - HPE Fibre Channel Host Bus Adapters Emulex HBA Manager, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Arbitrary File Download, Arbitrary File Modification, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 8Gb PCIe Host Bus Adapters - Prior to Emulex HBA Manager 12.8.542.26 - Please see VULNERABILTY SUMMARY section for model...

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

Design/Logic Flaw

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes...

CVE-2021-3843

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

Evolving Zero Trust—Lessons learned and emerging trends

Looking back at the last two years, to say that our security strategies have evolved would be an understatement. Organizations around the world made overnight transitions to remote work models in response to a global pandemic, forcing them to reassess attack surface areas as they underwent an...

mitchesmilitarymodels.co.uk Improper Access Control vulnerability OBB-2228564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

NETGEAR Wi-Fi router setupwizard.cgi Code Execution

The vulnerability of the setupwizard.cgi component in NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6350, R6330, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, R7450, and WAC124 lies in buffer overflow in the stack. Exploiting this...

NETGEAR Wi-Fi router Code Execution

The vulnerability of NETGEAR Wi-Fi router software models AC2100, AC2400, AC2600, R6020, R6080, R6120, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 lies in the copying of buffers without checking the size of input data. Exploiting this vulnerability allows a...

CVE-2021-29213

A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitiv...

Qualcomm chip information leakage vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. There is an information disclosure vulnerability in Qualcomm chips. The...

Multiple Qualcomm product vulnerabilities involving buffer errors

The Qualcomm QCA6574AU and others are products of Qualcomm Incorporated, U.S.A. The QCA6574AU is a central processing unit CPU product.The APQ8053 is a central processing unit CPU product.The QCS605 is a central processing unit CPU product. A buffer error vulnerability exists in a number of...

Multiple Qualcomm products have security vulnerabilities

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.SDX55 is a modem.QCA6390 is a central processing unit CPU product. A security vulnerability exists in the Qualcomm chip that originated. The affected products and versio...

Qualcomm chip security vulnerabilities

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chips have a security vulnerability and the affected produc...

How we took part in MLSEC and (almost) won

This summer Kaspersky experts took part in the Machine Learning Security Evasion Competition MLSEC — a series of trials testing contestants ability to create and attack machine learning models. The event is comprised of two main challenges — one for attackers, and the other for defenders. The...

sensuality-models.com Improper Access Control vulnerability OBB-2199171

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-56WV-2WR9-3H9R Improper Verification of Cryptographic Signature in fastecdsa

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

Multiple Qualcomm product vulnerabilities involving buffer errors

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The MDM9206 is a central processing unit CPU product.The QCA6574AU is a central processing unit CPU product.The APQ8053 is a central processing unit CPU product.The APQ8053 is a central processing unit CPU...