EUVD-2010-1824

Malware in sbrugna...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs CVE-2023-52913 In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity: disable tasklets CVE-2024-26718 In the Linux kernel, the following...

kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload

A flaw was found in the Linux kernel. A race condition in network bridge management could lead to a denial of service...

kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload

A flaw was found in the Linux kernel. A race condition in network bridge management could lead to a denial of service...

CLSA-2024-1725871927 kernel: Fix of 30 CVEs

gfs2: Fix potential glock use-after-free on unmount CVE-2024-38570 - gfs2: Remove ill-placed consistency check CVE-2024-38570 - gfs2: introduce new gfs2glockassertwithdraw CVE-2024-38570 - gfs2: simplify gdlmputlock with outfree label CVE-2024-38570 - wifi: mt76: replace skbput with skbputzero...

kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload

A flaw was found in the Linux kernel. A race condition in network bridge management could lead to a denial of service...

How to Configure a CloudConnector Between Two NetScaler VPX Appliances Using a Wizard

This article describes how to configure a CloudConnector between two NetScaler VPX appliances on different data centers- Data Center A and Data Center B using a wizard. Background CloudConnector is a feature used to build a cloud-extended data center. You can create bridges to connect one or more...

CVE-2022-48748 net: bridge: vlan: fix memory leak in __allowed_ingress

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in allowedingress When using per-vlan state, if vlan snooping and stats are disabled, untagged or priority-tagged ingress frame will go to check pvid state. If the port state is forwarding and t...

kernel: net: bridge: data races indata-races in br_handle_frame_finish()

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEVSTATSINC syzbot/KCSAN reported data-races in brhandleframefinish 1 This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEVSTATSINC to update dev-stats fields. Handles updates to...

D-Link DAP-1325 安全漏洞

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link that is primarily used to provide wireless network coverage and has a bridging function that can convert a wired network to a wireless network or connect two wireless networks together. A security vulnerability exists i...

CVE-2024-26837

A flaw was found in the Linux kernel. A race condition in network bridge management could lead to a denial of service...

The vulnerability of the Siveillance Video Open Network Bridge software for IP video surveillance systems allows a intruder to decode all the credentials stored on the ONVIF server.

The vulnerability of the Siveillance Video Open Network Bridge software management system for IP-camera surveillance is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to decrypt all the credentials stored on...

U.S. Offers $10 Million Reward for Information on North Korean Hackers

The U.S. State Department has announced rewards of up to $10 million for any information that could help disrupt North Korea's cryptocurrency theft, cyber-espionage, and other illicit state-backed activities. "If you have information on any individuals associated with the North Korean...

The vulnerability of Nomad application orchestrators, related to the false representation of critical information to the user interface, allows attackers to compromise data integrity.

The vulnerability of Nomad application orchestrators is related to a network bridge mode error. Exploiting this vulnerability allows an attacker operating remotely to compromise data integrity...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

Hardcoded credentials

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

CVE-2021-27392

Summary (CVE-2021-27392) : Siemens/Milestone Open Network Bridge (ONVIF) implementations across multiple versions (2018–2020 releases) store user credentials using a hard-coded cryptographic key. An authenticated remote attacker could retrieve and decrypt credentials stored on the ONVIF server vi...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

Siemens Open Network Bridge 信任管理问题漏洞

Siveillance Video formerly known as Siveillance VMS is an IP video management software.The Siveillance Video product portfolio consists of four editions, Siveillance Video Core, Core Plus, Advanced, and Pro, which address the specific needs of small to medium-sized solutions to large, complex...

Siemens and Milestone Siveillance Video Open Network Bridge

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens and Milestone Equipment: Siveillance Video Open Network Bridge ONVIF Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability could...