North Korean state-sponsored threat actor Lazarus Group exploiting Chrome Zero-day vulnerability

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here For more than a month before a fix was available, North Korean state hackers known as Lazarus group exploited a zero-day, remote code execution vulnerability CVE-2022-0609 in Google Chromes web browser. The attack mainly targe...

GHSA-XJQR-G762-PXWP containernetworking/cni improper limitation of path name

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

containernetworking/cni improper limitation of path name

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

Iranian state-sponsored APT group MuddyWater targeting organizations via malicious executables

THREAT LEVEL: Red. United States Cyber Command USCYBERCOM has warned of an ongoing cyber attack by Iranian state sponsored actor named as MuddyWater. This APT group is currently targeting Middle Eastern countries and has also targeted European and North American nations. The Iranian-backed...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a memory leak vulnerability that stems from a configuration error in a networked system or product during operation. An attacker could use this vulnerability to gain...

CVE-2021-33843

CVE-2021-33843 concerns Fresenius Kabi Agilia Connect Infusion System components (Agilia SP MC WiFi vD25 and earlier; Agilia Link+ v3.0 and earlier) with a default configuration page that is accessible without authentication. The vulnerability allows an attacker to alter exposed configuration val...

The vulnerability in the ChromeOS Networking component of the Google Chrome browser allows a hacker to gain privileged access to the infrastructure through a created ONC file.

The vulnerability of the ChromeOS Networking component of the Google Chrome browser is related to implementation errors in security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access to infrastructure through a...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Pixel Display/graphics in Google Android 11, which stems from a configuration error in the network system or product during operation. An attacker could exploit the vulnerability to...

Google Android 信息泄露漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain sensiti...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain sensiti...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a configuration error in the network system or product during operation. An attacker could exploit the vulnerability to cause a local privilege...

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

Zoho ManageEngine Network Configuration Manager SQL Injection (CVE-2021-41081)

An SQL injection vulnerability exists in Zoho ManageEngine Network Configuration Manager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

ZOHO ManageEngine Network Configuration Manager Command Injection Vulnerability

ZOHO ManageEngine Network Configuration Manager is a multi-vendor network change, configuration and compliance management Nccm solution from ZOHO USA. A command injection vulnerability exists in ZOHO ManageEngine Network Configuration Manager, which stems from the product's Ping feature that does...

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

Command injection

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

CVE-2021-43319

CVE-2021-43319 affects Zoho ManageEngine Network Configuration Manager prior to 125488. The vulnerability is a command injection due to improper validation in the Ping functionality, allowing an attacker to execute system commands. Affected component: Ping in the add device web interface; root ca...