PT-2021-19941 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 20.0.12 Nextcloud Server versions prior to 21.0.4 Nextcloud Server versions prior to 22.1.0 Description: Nextcloud server is an open source, self-hosted personal cloud that supports rendering image previews...

PT-2021-6543

Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions prior to 3.0.16 Cyrus IMAP versions prior to 3.2.8 Cyrus IMAP versions prior to 3.4.2 Description The issue allows remote attackers to cause a denial of service, resulting in a multiple-minute daemon hang. This occurs due t...

GHSA-MXR5-MC97-63RC Account Takeover in Octobercms

Impact An attacker can request an account password reset and then gain access to the account using a specially crafted request. - To exploit this vulnerability, an attacker must know the username of an administrator and have access to the password reset form. Patches - Issue has been patched in...

PT-2021-4468

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.0.2 iPadOS versions prior to 15.0.2 macOS Monterey versions prior to 12.0.1 iOS versions prior to 14.8.1 iPadOS versions prior to 14.8.1 tvOS versions prior to 15.1 watchOS versions prior to 8.1 macOS Big Sur versions...

PT-2021-4454

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.8 iPadOS versions prior to 14.8 watchOS versions prior to 7.6.2 Mac OS versions prior to Security Update 2021-005 Catalina, macOS Big Sur 11.6 Description The issue is caused by an integer overflow that can be exploite...

PT-2021-18924 · Apple +1 · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.6 Description: A logic issue was addressed with improved state management. This issue allows a sandboxed process to potentially circumvent sandbox restrictions. The...

PT-2021-18998 · Apple · Tvos +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A race condition was addressed with improved state handling. This issue allows a...

PT-2021-7497 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.7 and below Description: An issue in the component Create tmp table::finalize of MariaDB Server was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements. The...

PT-2021-5098 · Adobe · Captivate

Name of the Vulnerable Software and Affected Versions: Adobe Captivate versions 11.5.5 and earlier Description: The issue is related to the creation of temporary files with incorrect permissions, which could allow an attacker to escalate privileges in the context of the current user. This can be...

PT-2021-4731 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow in dynamic memory, potentially allowing an attacker to access protected information or cause a denial of service. Exploitation requires user...

PT-2021-10213 · Unknown · Lin-Cms-Flask

Name of the Vulnerable Software and Affected Versions: Lin-CMS-Flask version 0.1.1 Description: The issue allows remote attackers to launch brute force login attempts without restriction via the login function in the component app/api/cms/user.py. This enables attackers to attempt multiple logins...

PT-2021-7500 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6.2 and below Description: An issue in the component Arg comparator::compare real fixed was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements. The vulnerability is...

PT-2021-5222 · Zoom · Zoom Meeting Sdk For Android +21

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings versions 5.8.3 and earlier Zoom Client for Meetings for Blackberry versions 5.8.0 and earlier Zoom Client for Meetings for intune versions 5.8.3 and earlier Zoom Client for Meetings for Chrome OS versions 5.0.0 and...

Detecting PrintNightmare Exploit Attempts using Trend Micro Vision One and Cloud One

We look into the different implementations of PrintNightmare and include recommendations on how security teams can safeguard their workloads...

PT-2021-6723 · Fig2Dev +3 · Fig2Dev +3

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A global buffer overflow in the set fill component in genge.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into ge format. This issue is related to the lack of inp...

PT-2021-6546 · Fig2Dev +3 · Fig2Dev +3

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A stack-based buffer overflow in the put arrow component in genpict2e.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into pict2e format. Recommendations: For fig2d...

PT-2021-16044 · WordPress · Profilepress

Name of the Vulnerable Software and Affected Versions: User Registration, User Profile, Login & Membership – ProfilePress Formerly WP User Avatar versions prior to 3.1.11 Description: The issue concerns a lack of proper escaping in the widget for tabbed login/register, which could be exploited in...

PT-2021-7495 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6 and below Description: The issue is related to an use-after-free in the my strcasecmp 8bit component of MariaDB Server, which can be exploited through specially crafted SQL statements, potentially allowing a remot...

The Ransomware Task Force: A New Approach to Fighting Ransomware

In the past few months, we’ve seen ransomware attacks shut down healthcare across Ireland, fuel delivery across parts of the US, and meat processing across Australia, Canada and the US. We’ve seen demands of payments in the tens of millions of dollars. We’re also continuing to see trends around...

When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks

Note: In this two-part blog series, we expose a modern malware infrastructure and provide guidance for protecting against the wide range of threats it enables. Part 1 covered the evolution of the threat, how it spreads, and how it impacts organizations. Part 2 provides a deep dive on the attacker...