H3C R3010 安全漏洞

The H3C R3010 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C R3010 v100R002L02 version, which stems from a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

CVE-2024-42639

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42637

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

kernel: FUSE allows UAF reads of write() buffers, allowing theft of (partial) /etc/shadow hashes

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write. This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: KVM: s390: vsie: fix race during shadow creation

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap-private being zero in kvms390vsiegmapnotifier resulting in a crash. This is due to the fact that we add gmap-private == kvm after creation:...

Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers

Cybersecurity researchers have discovered multiple critical flaws in Amazon Web Services AWS offerings that, if successfully exploited, could result in serious consequences. "The impact of these vulnerabilities range between remote code execution RCE, full-service user takeover which might provid...

Illuminating the Shadows: Managing the Risks of Shadow AI in Modern Enterprises

Understanding the challenge of Shadow AI Shadow AI – a dramatic term for a new problem. With the rise of widely available consumer level AI services with easy-to-use chat interfaces, anyone from the summer intern to the CEO can easily use these shiny and new AI products. However, anyone who’s eve...

SUSE SLES12 Security Update : shadow (SUSE-SU-2024:2805-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2805-1 advisory. - CVE-2013-4235: Fixed TOCTOU race condition bsc916845 Tenable has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2808-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2808-1 advisory. - Fixed not copying of skel files bsc1228770 Tenable has extracted the preceding description block direct...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2804-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2804-1 advisory. - Fixed not copying of skel files bsc1228770 Tenable has extracted the preceding description block direct...

SUSE-SU-2024:2809-1 Security update for shadow

This update for shadow fixes the following issues: - Fixed not copying of skel files bsc1228770...

SUSE-SU-2024:2808-1 Security update for shadow

This update for shadow fixes the following issues: - Fixed not copying of skel files bsc1228770...

SUSE-SU-2024:2807-1 Security update for shadow

This update for shadow fixes the following issues: - Fixed not copying of skel files bsc1228770...

SUSE-SU-2024:2806-1 Security update for shadow

This update for shadow fixes the following issues: - Fixed not copying of skel files bsc1228770...

SUSE-SU-2024:2805-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2013-4235: Fixed TOCTOU race condition bsc916845...

SUSE-SU-2024:2804-1 Security update for shadow

This update for shadow fixes the following issues: - Fixed not copying of skel files bsc1228770...

SUSE: Security Advisory (SUSE-SU-2024:2805-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Introducing the Rapid7 Command Platform

Integrated Security Operations for the Next-Generation Attack Surface As cybercrime and attack surfaces have sprawled, Rapid7 has been able to grow with our customers because we are relentlessly focused on relevance. The way we see it, relevance doesn’t mean aligning to market definitions of...

Rapid7 Introduces Exposure Command to Eliminate the Security Visibility Gap

Exposure Command provides 360-degree visibility and enables security teams to pinpoint and extinguish your most critical risks. Security and IT teams are experiencing a significant shift in operations as they become more distributed. Development and procurement processes have decentralized, and...