SUSE: Security Advisory (SUSE-SU-2022:0727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for libeconf, (openSUSE-SU-2022:0727-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE 15 Security Update : libeconf, shadow and util-linux (openSUSE-SU-2022:0727-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0727-1 advisory. - A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE...

SUSE SLED15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2022:0727-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0727-1 advisory. This security update for libeconf, shadow and util-linux fix the following issues: libeconf: - Add libeconf to...

CVE-2021-46381

Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...

SUSE-SU-2022:0727-1 Security update for libeconf, shadow and util-linux

This security update for libeconf, shadow and util-linux fix the following issues: libeconf: - Add libeconf to SLE-Module-Basesystem15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters bsc1192954, jscSLE-23384, jscSLE-23402 Issues fixed in...

OPENSUSE-SU-2022:0727-1 Security update for libeconf, shadow and util-linux

This security update for libeconf, shadow and util-linux fix the following issues: libeconf: - Add libeconf to SLE-Module-Basesystem15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters bsc1192954, jscSLE-23384, jscSLE-23402 Issues fixed in...

D-Link DAP-1620 路径遍历漏洞

A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...

Security update for libeconf, shadow and util-linux (moderate)

openSUSE Security Update: Security update for libeconf, shadow and util-linux Announcement ID: openSUSE-SU-2022:0727-1 Rating: moderate References: 1188507 1192954 1193632 1194976 SLE-23384 SLE-23402 Cross-References: CVE-2021-3995 CVE-2021-3996 CVSS scores: CVE-2021-3995 SUSE: 4.7...

Details of an NSA Hacking Operation

Pangu Lab in China just published a report of a hacking operation by the Equation Group aka the NSA. It noticed the hack in 2013, and was able to map it with Equation Group tools published by the Shadow Brokers aka some Russian group. …the scope of victims exceeded 287 targets in 45 countries,...

CVE-2022-22795

Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...

WordPress Drop Shadow Boxes plugin <= 1.7.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Drop Shadow Boxes plugin versions = 1.7.4. Solution Update the WordPress Drop Shadow Boxes plugin to the latest available version at least 1.7.5...

WordPress Drop Shadow Boxes plugin <= 1.7.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Drop Shadow Boxes plugin versions = 1.7.4. Solution Update the WordPress Drop Shadow Boxes plugin to the latest available version at least 1.7.5...

Chinese Experts Uncover Details of Equation Group's Bvp47 Covert Hacking Tool

Researchers from China's Pangu Lab have disclosed details of a "top-tier" backdoor put to use by the Equation Group, an advanced persistent threat APT with alleged ties to the cyber-warfare intelligence-gathering unit of the U.S. National Security Agency NSA. Dubbed "Bvp47" owing to numerous...

Acronis VSS Doctor 代码问题漏洞

Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts relates to the improper assignment of permissions to files, allowing an attacker to increase their privileges.

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts is related to the improper assignment of permissions to files. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Microsoft Windows SAM Local Privilege Escalation Vulnerability

If a Volume Shadow Copy VSS shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level...

VulnCheck KEV: CVE-2021-36934

If a Volume Shadow Copy VSS shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level...

Exploit for Incomplete Cleanup in Linux Linux_Kernel

CVE-2021-4032-NoGCC Test in: Ubuntu 20...

Mageia: Security Advisory (MGASA-2017-0465)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...