Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46567)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR D6100 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...

NETGEAR R9000 and R7800 Buffer Overflow Vulnerability

The NETGEAR R9000 and NETGEAR R7800 are both wireless routers from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.40 and the R9000 prior to version 1.0.3.6. The vulnerability originates when a network system or product performs an operation on memory...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-46355)

The NETGEAR R9000, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28245)

NETGEAR R7500 and others are products of NETGEAR Corporation.NETGEAR R7500 is a wireless router.NETGEAR D6100 is a wireless modem.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products that originates when a...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46563)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR D6100 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...

gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c

It was discovered that gvfs incorrectly set the ownership of files handled by the admin:// backend. An attacker could abuse this flaw when the destination file of a copy/move operation is handled by the admin:// backend. The attacker would have access to the target files with the ability to read...

gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move and copy with GFILECOPYALLMETADATA operations from admin:// to file:// URIs, because root privileges are unavailable...

CVE-2019-19447

A flaw was found in the Linux kernel's ext4unlink function. An attacker could corrupt memory or escalate privileges when deleting a file from a recently unmounted specially crafted ext4 filesystem, including local, USB, and iSCSI. Mitigation Ext4 filesytems are built into the kernel so it is not...

The vulnerability of the LoadExcl and StoreExcl operations in the Xen hypervisor allows a perpetrator to trigger a service failure.

The vulnerability of the LoadExcl or StoreExcl operation in Xen hypervisors is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a attacker to cause a service failure...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-50926)

The NETGEAR R6700, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Command injection

Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer's hostname or service name. An attacker can create a specially-crafted hostname or service name to b...

Notorious dark web child abuser arrested after int’l operation

By Deeba Ahmed Authorities have arrested a dark web child abuser known for uploading highly graphic content on several marketplaces and online forums. This is a post from HackRead.com Read the original post: Notorious dark web child abuser arrested after int'l operation...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67653)

NETGEAR D7800 is a wireless modem, NETGEAR R7500 is a wireless router, NETGEAR WNDR4300 is a wireless router, and NETGEAR D7800 is a wireless modem. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a networked system or product that does not proper...

Authentication flaw

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205C00E201R7P2 have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to...

PowerShell-Suite

This is an exploit module/toolkit targeting Windows UAC User Account Control bypass. The module, named "Bypass-UAC," provides a framework for performing UAC bypasses based on auto-elevating IFileOperation COM object method calls. It implements a function that rewrites PowerShell's PEB Process...

CVE-2019-20778

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Backup subsystem does not properly restrict operations or validate their input. The LG ID is LVE-SMP-190004 June 2019...

NETGEAR R7800 Buffer Overflow Vulnerability (CNVD-2020-23427)

The NETGEAR R7800 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.52. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Oracle Virtualization VM VirtualBox Unauthorized Operation Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle E-Business Suite Email Center Unauthorized Operation Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Email Center is one of the e-mail component. A securi...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2020-1419)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...