127 matches found
CVE-2022-23335
creationtimestamp| type| source ---|---|--- 2022-02-15 00:33:20+00:00| seen| https://t.me/cibsecurity/37466...
CVE-2022-23035
creationtimestamp| type| source ---|---|--- 2022-01-25 16:18:41+00:00| seen| https://t.me/cibsecurity/36209...
Vulnerabilities fixed in Fedora kernel
Vulnerabilities have been fixed in Fedora kernel. The vulnerabilities allow a malicious person to cause a denial-of-service cause. -= Fedora =- Fedora has made updates available for Fedora 34 and 35. You can install these updates using the command 'dnf' or 'yum'. More information about these...
CVE-2021-35029
An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected devi...
CVE-2021-31516
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...
CVE-2021-31515
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...
Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet
Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named "VictoryGate," has been active since May 2019, with infectio...
Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide
Microsoft today announced that it has successfully disrupted the botnet network of the Necurs malware, which has infected more than 9 million computers globally, and also hijacked the majority of its infrastructure. The latest botnet takedown was the result of a coordinated operation involving...
mIRC Resource Management Error Vulnerability
mIRC is a Windows-based interconnected relay chat client program. A resource management error vulnerability exists in mIRC versions prior to 6.35. An attacker can exploit this vulnerability to cause a denial of service crash with a long alias...
file do_core_note Denial of Service Vulnerability
file is a command-line tool used on Unix-like systems to view file information. A security vulnerability exists in the docorenote file of the readelf.c file of the libmagic.a static link library in file version 5.35. A remote attacker could use this vulnerability to cause a denial of service stac...
Two Pilots Exif Pilot Buffer Overflow Vulnerability
Two Pilots Exif Pilot is a free EXIF an image file format editor from Two Pilots, which is mainly used for analyzing digital camera settings, depicting information about the conditions of taking EXIF data, and supports processing multiple photos, importing/exporting metadata, and more. A buffer...
UBUNTU-CVE-2014-8636
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors...
JDK: unspecified vulnerability (Deployment)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than...
JDK: unspecified vulnerability (Deployment)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than...
OpenJDK: LogManager security bypass (Libraries, 7169884)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.238 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different...
OpenJDK: AccessController.doPrivilegedWithCombiner() information disclosure (Security, 7172522)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security...
OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot...
kernel: xfs swapext ioctl minor security issue
The xfsswapext function in fs/xfs/xfsdfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file...
2020-11 Cumulative Update Preview for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 (KB4588962)
2020-11 Cumulative Update Preview for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 KB4588962...