CVE-2021-31369

On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated network attacker to cause a partial Denial of Service DoS with a high rate of specific traffic. If a Class of Service CoS rule is...

CVE-2021-41338

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

CVE-2021-41338

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

CVE-2021-41338

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

CVE-2021-41338 Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

...

CVE-2021-41338

Technical details about CVE-2021-41338 (Windows AppContainer Firewall Rules Security Feature Bypass) are not provided in the connected documents. Monitor for updates.

CVE-2021-41338 Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

...

CVE-2021-41338: Undefined Security Weakness

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

SAS 2021: Learning to ChaCha with APT41

Straight from the sunny UK to the stage of SAS-at-Home 2021, John Southworth PwC will be giving some insights about the threat actor APT41, also known as Red Kelpie and Winnti. Starting with APT10 Red Apollo, the presentation will dance you through the malware used by APT41 – the Motnug loader an...

OPENSUSE-SU-2021:3348-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...

SUSE-SU-2021:3348-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

...

PT-2021-4424 · Microsoft · Windows Appcontainer +1

Name of the Vulnerable Software and Affected Versions: Windows AppContainer affected versions not specified Description: The issue is related to a security feature bypass in the Windows AppContainer firewall rules, which can be exploited to bypass the protection mechanism. This could allow an...

SD-WAN: ICMP are denied by Firewall to monitor WAN links VIPs

ICMP are denied by Firewall to monitor WAN links VIPs...

CVE-2021-39886

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references...

CVE-2021-39886

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references...

What's New in InsightIDR: Q3 2021 in Review

This post offers a closer look at some of the recent updates and releases in InsightIDR, our extended detection and response solution, from Q3 2021. Welcome IntSights to the Rapid7 Insight Platform family! As you may have seen in recent communications, Rapid7 acquired IntSights, a leading provide...

PT-2021-22732 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.6 through 14.1.7 Description: The issue concerns permissions rules not being applied when moving issues between projects of the same group, allowing users to read confidential Epic references. Recommendations: For GitLab...

CVE-2021-24676

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

PT-2021-16187

Name of the Vulnerable Software and Affected Versions Better Find and Replace WordPress plugin versions prior to 1.2.9 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the s GET parameter is not properly escaped before being outputted back in the All...