SQL Injection Vulnerability in Blue Ocean Premier Billing Management System (CNVD-2021-39085)

Blue Ocean Excellence Certification and Billing Management System is a network security operation management system that is based on realizing network operation, enhancing global security as the center and improving management efficiency. The Blue Ocean Excellence Billing Management System suffer...

Command Execution Vulnerability in TopIDP, an Intrusion Prevention System of Tianrongxin

TopIDP, the intrusion prevention system of TIANRONGXIN, is a network security protection product that defends against all kinds of attack threats in the network and protects customers' network IT service resources in real time. There is a command execution vulnerability in TopIDP. An attacker can...

Code Execution Vulnerability in Blue Ocean Premier Billing Management System

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. A code execution vulnerability exists in the Blue Ocean Premier Billi...

EulerOS 2.0 SP8 : python-pygments (EulerOS-SA-2021-1887)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...

EulerOS 2.0 SP8 : git (EulerOS-SA-2021-1870)

According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as...

EulerOS 2.0 SP5 : PyYAML (EulerOS-SA-2021-1912)

According to the version of the PyYAML package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes...

Denial of Service Vulnerability in MERCURY D121G, MW310R, M6G, D196G

hereinafter referred to as MERCURY was founded in 2001, and its business scope includes the following: general business items are: technical development of computer wireless LAN products, computer hardware and software, communication equipment, electronic products and network security equipment. ...

SUSE SLES12 Security Update : python3 (SUSE-SU-2021:1621-1)

This update for python3 fixes the following issues : Security issues fixed : CVE-2020-27619: where Lib/test/multibytecodecsupport calls eval on content retrieved via HTTP. bsc1178009 Other fixes : Make sure to close the 'importfailed.map' file after the exception has been raised in order to avoid...

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2021-1880)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file...

What a Year It’s Been: RSA 2021 Embraces ‘Resilience’

Clearly, the months since the world shut down in March of 2020 fomented a radical shift in how people work and live, and it’s brought a range of crises and challenges to bear across the spectrum of our lives. These profound changes and experiences were also felt in cybersecurity, bringing...

CVE-2021-32456

CVE-2021-32456 affects SITEL CAP/PRX firmware 5.2.01. Affected component: firmware networking/cleartext handling that allows a local-network attacker to obtain authentication passwords by analyzing traffic. Impact: confidentiality of credentials is HIGH per CVSS-3.1 (base score 6.5); exploitation...

Debian DLA-2663-1 : libimage-exiftool-perl security update

A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. For Debian 9 stretch, this problem has been fixed in version 10.40-1+deb9u...

Top Certifications for Network Security Administrators in 2021

By Waqas The demand for security professionals is at its peak like never before. Here are some certifications that will help you polish your skills. This is a post from HackRead.com Read the original post: Top Certifications for Network Security Administrators in 2021...

SUSE SLED15 / SLES15 Security Update : dtc (SUSE-SU-2021:1598-1)

This update for dtc fixes the following issues : make all packaged binaries PIE-executables bsc1184122. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

uC/TCP-IP Stack - HTTP Detection

Binary data uctcpipstackhttpdetect.nbin...

CVE-2021-20999

The CVE-2021-20999 issue affects Weidmüller u-controls and IoT-Gateways (versions up to 1.12.1). A network port intended for device-internal use is reachable via external interfaces, enabling manipulation of the device or disruption of operation. The vulnerability is documented with high/critical...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1580-1)

This update for xen fixes the following issues : A recent systemd update caused a regression in 'xenstored.service' systemd now fails to track units that use systemd-notify. bsc1183790 Add a fix to delay between the call to 'systemd-notify' and the final exit of the wrapper script. bsc1185021,...

SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2021:1577-1)

This update for openvpn fixes the following issues : CVE-2020-15078: Fixed authentication bypass with deferred authentication bsc1185279. CVE-2020-11810: Fixed race condition between allocating peer-id and initializing data channel key bsc1169925. CVE-2018-7544: Fixed cross-protocol scripting iss...

‘FragAttacks’: Wi-Fi Bugs Affect Millions of Devices

A Belgian security researcher specializing in Wi-Fi bugs has unearthed a clutch of new ones, which he called FragAttacks, that affect the Wi-Fi standard itself. The name is short for “fragmentation and aggregation attacks.” Some bugs date back to 1997, meaning that computers, smartphones or other...

Debian DLA-2654-1 : composer security update

It was discovered that composer, a dependency manager for PHP, did not properly sanitize Mercurial URLs, which could lead to arbitrary code execution. For Debian 9 stretch, this problem has been fixed in version 1.2.2-1+deb9u1. We recommend that you upgrade your composer packages. For the detaile...