Apple iOS Security Vulnerabilities

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, where a local user may be able to create or modify privileged files. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 an...

Apple iOS Security Vulnerabilities

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which is caused by an obscure password in a screenshot. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad...

Apple Kernel buffer error vulnerability

The Apple Kernel is the kernel for Apple devices from Apple Inc. in the United States. A security vulnerability exists in Apple Kernel, which can be exploited by malicious applications to execute arbitrary code using kernel privileges. The following products and versions are affected: iPhone 6s a...

Apple Shortcuts security vulnerabilities

Apple Shortcuts for iOS is a suite of shortcut applications from Apple Inc. for the iOS platform. A security vulnerability exists in Apple Shortcuts, which originated when the application could allow Shortcuts to access restricted files. The following products and versions are affected: iPhone 6s...

Buffalo broadband routers have security vulnerabilities

Buffalo Firmware is a networking device from Buffalo Japan. A security vulnerability exists in Buffalo broadband routers that stems from improper access control. The following products and versions are affected: BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior,...

Buffalo network device security vulnerabilities

Buffalo firmware is a network device from Buffalo Japan. A security vulnerability exists in Buffalo network devices that could allow a remote attacker to open debugging options and execute arbitrary code or operating system commands to alter the configuration and cause a denial-of-service DoS...

Apple iOS Security Vulnerabilities

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which stems from the ability of traditional cellular networks to automatically answer incoming calls when a call ends or is disconnected. The following products and versions...

Apple iOS Security Vulnerabilities

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, where a malicious application may be able to determine the kernel memory layout. The following products and versions are affected: iPhone 6s and later, iPad Pro all models,...

Apple Kernel security vulnerabilities

The Apple Kernel is the kernel for Apple devices from Apple, Inc. A security vulnerability exists in the Apple Kernel, which originates in state management. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad 5th generation and...

Improper Restriction of XML External Entity Reference in pikepdf

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

SUSE: Security Advisory (SUSE-SU-2019:1042-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...

JunOS CLI DoS

The vulnerability of the command-line interface CLI of the JunOS operating system for EX2300 and EX3400 routers is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Gigaset Android Update Server Hacked to Install Malware on Users' Devices

Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider. Impacting older smartphone models — GS100, GS160, GS170, GS180, GS270 plus, and GS370 plus series — the malware took the form of...

NETGEAR Wi-Fi Router Authentication DoS

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, models D6200, D7000, R6020, R6080, R6050, and JR6150, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

As seen in recent sophisticated cyberattacks, especially human-operated campaigns, it’s critical to not only detect an attack as early as possible but also to rapidly determine the scope of the compromise and predict how it will progress. How an attack proceeds depends on the attacker’s goals and...

Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

As seen in recent sophisticated cyberattacks, especially human-operated campaigns, it’s critical to not only detect an attack as early as possible but also to rapidly determine the scope of the compromise and predict how it will progress. How an attack proceeds depends on the attacker’s goals and...

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

CVE-2021-29421: Improper Restriction of XML External Entity Reference

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...