CVE-2020-6081

An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...

PT-2020-18910

Name of the Vulnerable Software and Affected Versions 3S-Smart Software Solutions GmbH CODESYS Runtime version 3.5.14.30 Description An exploitable code execution issue exists in the PLC Task functionality. A specially crafted network request can cause remote code execution. An attacker can send ...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0615-1 Rating: important References: 1170107 Cross-References: CVE-2020-0561 CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 CVE-2020-6462 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes 5...

PT-2020-17539

Name of the Vulnerable Software and Affected Versions futures-task crate versions prior to 0.3.5 Description An issue in the futures-task crate allows a NULL pointer dereference. The affected versions of the crate used an UnsafeCell in thread-local storage to return a noop waker reference, assumi...

chromium-browser: Use after free in task scheduling

A flaw was found in the Chromium browser. The task scheduling component was found to have a use-after-free memory flaw. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

RHEL 6 : chromium-browser (RHSA-2020:1981)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1981 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 81.0.4044.129. Security Fixes:...

CVE-2020-6462

A flaw was found in the Chromium browser. The task scheduling component was found to have a use-after-free memory flaw. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

[SECURITY] Fedora 30 Update: ansible-2.9.7-1.fc30

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

[SECURITY] Fedora 32 Update: ansible-2.9.7-1.fc32

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

PT-2020-3425

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.129 Description The issue is related to a use after free in task scheduling, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a...

Stable Channel Update for Desktop

The stable channel has been updated to 81.0.4044.129 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

Windows Task Scheduler Privilege Escalation

The vulnerability of the Windows Task Scheduler, a task scheduling tool for Windows operating systems, is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Important: Red Hat Security Advisory: Ansible security and bug fix update (2.8.11)

An update for ansible is now available for Ansible Engine 2.8 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Ansible security and bug fix update (2.7.17)

An update for ansible is now available for Ansible Engine 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Ansible security and bug fix update (2.9.7)

An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Pillaging AWS ECS Task Definitions for Hardcoded Secrets

The post Pillaging AWS ECS Task Definitions for Hardcoded Secrets appeared first on Rhino Security Labs...

tater

It is an offensive tool for Windows Privilege Escalation. The tool is called Tater, a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. The target product/service or framework is Windows, and the vulnerability class/vector is Privilege Escalation. The probable entr...

Unspecified Vulnerability in Z-Cron

Z-Cron is a scheduled task scheduler. The program supports timed startup or exit of programs in Windows. An unspecified vulnerability exists in Z-Cron that stems from incorrect access control. An attacker can exploit the vulnerability by modifying tasks for an elevated privilege user to elevate...

CVE-2020-11799

Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all users who are signed in on the system if a shell is placed in a location that other unprivileged users have access to...

Use after free

Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all users who are signed in on the system if a shell is placed in a location that other unprivileged users have access to...