Pulse Connect Secure < 9.1R12.1 DoS (SA44899)

According to its self-reported version, the version of Pulse Connect Secure running on the remote host is prior to 9.1R12.1. It is, therefore, affected by a denial of service DoS vulnerability. A remote, unauthenticated attacker can exploit this, by sending a malformed request to the device, in...

Updated flatpak packages fix security vulnerability

Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services into treating the Flatpak app as though it was an ordinary, non-sandboxed host-OS process, by manipulating the VFS using recent mount-related...

Vulnerability fixed in Pulse Connect Secure

A vulnerability has been fixed in Pulse Connect Secure. A unauthenticated administrator could potentially exploit it to cause a denial-of-service. Pulse Secure has released updates and a workaround to fix the vulnerability. For more information, see:...

Pulse Secure Pulse Connect Secure 资源管理错误漏洞

Pulse Secure Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is an SSL VPN solution from Pulse Secure, Inc. in the United States. Pulse Connect Secure suffers from a resource management error vulnerability that stems from insufficient validation of user-supplied input. An...

The vulnerability of the VPN gateway web interface for corporate networks, Pulse Connect Secure, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VPN gateway web interface for corporate networks in Pulse Connect Secure is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

openSUSE 15 Security Update : flatpak (openSUSE-SU-2021:3472-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3472-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatp...

Flatpak input validation error vulnerability

Flatpak is a suite of application virtualization systems for Linux desktop application computing environments. versions prior to Flatpak 1.12.0 and 1.10.4 contain an input validation error vulnerability that stems from direct access to AFUNIX sockets such as those used by Wayland, Pipewire or...

CVE-2021-41133

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

Code injection

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

CVE-2021-41133 Sandbox bypass via recent VFS-manipulating syscalls

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

CVE-2021-41133 Sandbox bypass via recent VFS-manipulating syscalls

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

lansingcitypulse.com Cross Site Scripting vulnerability OBB-2157746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exploit for Improper Authentication in Ivanti Connect_Secure

CVE-2021-22893 Proof-of-Concept PoC scrip...

Exploit for Improper Authentication in Ivanti Connect_Secure

CVE-2021-22893 Proof-of-Concept PoC scrip...

Exploit for Improper Authentication in Ivanti Connect_Secure

CVE-2021-22893 Proof-of-Concept PoC scrip...

Exploit for Improper Authentication in Ivanti Connect_Secure

CVE-2021-22893 Proof-of-Concept PoC scrip...

Exploit for Improper Authentication in Ivanti Connect_Secure

CVE-2021-22893 Proof-of-Concept PoC scrip...

Shorter, sharper DDoS attacks are on the rise – and attackers are sidestepping traditional mitigation approaches

Imagine that your network is under attack. A couple of minutes ago, you detected a large burst of traffic, out of nowhere. Now it’s in excess of 60 Gbps, and overwhelming your network. Your mitigation service hasn’t picked up the attack yet, and you’re just about to take a closer look when it sto...

The vulnerability of the Pulse Connect Secure corporate network VPN server, related to the unlimited download of dangerous types of files, allows a hacker to execute arbitrary code.

The vulnerability of the Pulse Connect Secure corporate network VPN server is related to the unlimited download of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading a specially created archive through the web administrator interface...

Exploitation of Pulse Connect Secure Vulnerabilities

Summary The Cybersecurity and Infrastructure Security Agency CISA is aware of compromises affecting a number of U.S. government agencies, critical infrastructure entities, and other private sector organizations by a cyber threat actor—or actors—beginning in June 2020 or earlier related to...