95 matches found
CVE-2021-47086 phonet/pep: refuse to enable an unbound pipe
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1 We'd...
SSPI Authentication Errors
Challenge In Veeam Backup & Replication When installing updates, restoring configuration, or directly interacting with the database e.g., using pgAdmin, the following error occurs: SSPI authentication failed for user In Veeam ONE When upgrading to Veeam ONE v13, the following error may occur:...
CloudNordic Faces Severe Data Loss After Ransomware Attack
By Deeba Ahmed While facing a total loss of internal infrastructure and customer data, CloudNordic has declined to pay the ransom. This is a post from HackRead.com Read the original post: CloudNordic Faces Severe Data Loss After Ransomware Attack...
kaml has potential denial of service while parsing input with anchors and aliases
Impact Applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Patches Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. Workarounds None. References Wikipedia has an explanation ...
CVE-2023-28118 kaml has potential denial of service while parsing input with anchors and aliases
kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and...
VPN Providers Threaten to Quit India Over New Data Law
The country has ordered companies operating VPNs to collect user data and hand it over to officials—but they’re refusing to do so...
Google and Facebook fined $240 million for making cookies hard to refuse
French privacy watchdog, the Commission Nationale de lInformatique et des Libertés CNIL, has hit Google with a 150 million euro fine and Facebook with a 60 million euro fine, because their websites—google.fr, youtube.com, and facebook.com—dont make refusing cookies as easy as accepting them. The...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j-Windows-Scanner CVE-2021-44228 vulnerability in Apache L...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4jScan simple python scanner to check if your network is vu...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Qingteng log4j2-patch https://github.com/qingtengyun/cve-2021...
ROS-2-1747
2.1747 Multiple vulnerabilities in Mozilla Thunderbird CVE-2021-29957, CVE-2021-29956 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass the security restrictions imposed.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia :...
ROS-2-1971
2.1971 Multiple vulnerabilities in Mozilla Thunderbird CVE-2021-29957, CVE-2021-29956 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass the security restrictions imposed.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia :...
ROS-2-1988
2.1988 Multiple vulnerabilities in Mozilla Thunderbird CVE-2021-29957, CVE-2021-29956 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass the security restrictions imposed.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia :...
SUSE SLES12 Security Update : glib2 (SUSE-SU-2021:0801-1)
This update for glib2 fixes the following issues : CVE-2021-27218: gbytearraynewtake takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. bsc1182328 CVE-2021-27219: gmemdup takes a guint as parameter and sometimes leads into an integer overflow...
Exploit for Server-Side Request Forgery in Microsoft
ProxyLogon Pre-Auth SSRF To Arbitrary File Write For Education...
Cyberpunk 2077 developer hit by ransomware
CD PROJEKT RED, the game developer behind Cyberpunk 2077, announced earlier on Twitter that it has fallen victim to a targeted ransomware attack. The company says it has backups for the affected systems and does not intend to pay the ransom. In their ransom note the attackers boast that they have...
Unheard recordings of Radiohead from Ok Computer hacked; refuses to pay ransom
By Waqas Popular British rock band Radiohead is in the news for all the wrong reasons. According to an announcement made by Radiohead this Tuesday, the band had to release 18 hours of unheard material from the studio sessions recorded in 1997 for their landmark album "Ok Computer." Guitarist Jonn...
WEM Admin console fails to connect with error "Error while connecting to the specified Infrastructure Server!"
WEM admin console fails to connect with error "Error while connecting to the specified Infrastructure Server!" The Citrix WEM Console Trace.Log file located in the user profile %username% reports the following error: "Exception - ConnectToBroker.Run : System.Net.Sockets.SocketException : No...
NotNow - Explanation and Cause
There are certain times when the device is not able to do what the server requests. For example, databases cannot be modified while the device is locked with Data Protection. When a device cannot perform a command due to situations like this, it will send the NotNow status without performing the...