python-pillow: Out-of-bounds read in SGI RLE image reader

A flaw was found in python-pillow. There is an Out of Bounds Read in SGIRleDecode.c...

What's New in InsightVM: Q3 2021 in Review

In today's post, we're giving a rundown of new features and functionality launched in Q3 2021 for InsightVM and the Insight Platform. We hope you can begin to leverage these changes to drive success across your organization. Apple Silicon support on the Insight Agent We're excited to announce tha...

CVE-2021-31609

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet...

CVE-2021-31609

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet...

CVE-2021-31609

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet...

Design/Logic Flaw

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet...

CVE-2021-31609

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet...

CVE-2021-31609

The CVE-2021-31609 issue affects Silicon Labs iWRAP (Bluegiga WT32i module) up to version 6.3.0 and earlier. The vulnerability arises in the Bluetooth Classic LMP handling when receiving an oversized LMP packet (>17 bytes), which can cause a crash in WT32i when a crafted LMP packet is processe...

Silicon Labs iWRAP 安全漏洞

Silicon Labs iWRAP is silabs' embedded Bluetooth stack for the Bluegiga Legacy Bluetooth Classic module. A security vulnerability exists in Silicon Labs iWRAP that stems from the Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier versions not properly handling the reception ...

BrakTooth Bluetooth vulnerabilities, crash all the devices!

Security researchers have revealed details about a set of 16 vulnerabilities that impact the Bluetooth software stack that ships with System-on-Chip SoC boards from several popular vendors. The same group of researchers disclosed the SweynTooth vulnerabilities in February 2020. They decided to du...

CVE-2021-36073

Adobe Bridge version 11.1 and earlier is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim...

HPESBHF04187 rev.2 - SGI UV 300/3000 and HPE Integrity MC990 X Servers Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server - Prior to firmware bundle 2021.07 SGI UV 300, 300H, 300RL, 30EX - Prior to firmware and diagnostic software 2021.07 SGI UV 3000 - Prior to firmwa...

CVE-2021-34314

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing SGI files. This could result in an out of bounds write past the end of an...

Siemens Jt2go 和 Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. An out-of-bounds write vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

Apple Silicon Support on Insight Agent

We are pleased to announce the general availability of native support of Apple Silicon chips for the Rapid7 Insight Agent! The Insight Agent has been fully validated and tested to run on the new Apple Silicon systems natively, and does not require Rosetta 2 to install or operate. This ensures...

Shaanxi Silicon Peak Network Technology Co., Ltd. website building system has file upload vulnerability

Shaanxi Silicon Peak Network Technology Co., Ltd. was founded in 2007 is a "website design, software development, microblogging, Internet marketing, e-commerce" and other integrated information technology services in one of the high-end brand IT organizations. Shaanxi Silicon Peak Network...

Weak Password Vulnerability in TRENDnet TV-IP651W

TRENDnet is one of the world's leading data networking specialists, headquartered in Silicon Valley. The TRENDnet TV-IP651W suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

The vulnerability in the architecture of Apple M1 chips, related to the open access from the EL0 mode of the ARM architecture registers under the code s3_5_c15_c10_1, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Apple M1 chip’s architecture is related to the open access from the EL0 mode of the ARM architecture registers, under the code s35c15c101. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information...

Silicon Peak website builder system suffers from SQL injection vulnerability

Shaanxi Silicon Peak Network Technology Co., Ltd. is a high-end brand network company integrating "website design, software development, micro letter construction" and other informationization services. There is a SQL injection vulnerability in Silicon Peak's website builder system, which can be...

Apple Silicon M1 芯片 信息泄露漏洞

The Apple Silicon M1 Apple M1 chip is a U.S. Apple's Apple M1 built-in octa-core CPU that integrates four high-performance large cores as well as four high-performance small cores. The Apple Silicon M1 chip suffers from an information disclosure vulnerability that allows local attackers to access...