CVE-2020-35857

An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption...

Stack overflow

An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption...

CVE-2020-35857

The CVE-2020-35857 entry applies to the trust-dns-server crate in Rust, prior to version 0.18.1. The issue arises from how MX and SRV null targets are handled, leading to stack consumption (stack overflow) when processing additional records for MX/SRV targets, potentially causing a crash and DOS....

CVE-2020-35857

An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption...

Evaluating Our Core Principles

Reflecting on the past year led me to put together this post about how I believe this incredibly challenging year has had an irreversible effect on the way the workforce will collaborate, innovate, and do business in the future. The COVID-19 pandemic emerged at the beginning of 2020 and led to ne...

多款Amino产品信任管理问题漏洞

The Amino Communications AK45x series, among others, is a family of television set-top box devices from Amino UK. Amino Communications has a trust management issue vulnerability that stems from the use of hard-coded passwords, which can be exploited by a local attacker to view and interact with t...

Amino Communications 多款产品信任管理问题漏洞

The Amino Communications AK45x series, among others, is a family of television set-top box devices from Amino UK. Amino Communications has a trust management issue vulnerability in a number of its products, which arises from a root user hard-coded SSH key that can be exploited by an attacker to...

Panasonic Security System Trust Management Issue Vulnerability

The Panasonic WV-S2231L is a webcam from Panasonic Japan. The Panasonic Security System WV-S2231L version 4.25 suffers from a trust management issue vulnerability that stems from having an insecure hard-coded password lkjhgfdsa which is just the asdf keyboard line in reverse order...

Backblaze 信任管理问题漏洞

Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A trust management issue vulnerability exists in Backblaze for Windows prior to 7.0.1.433 and Backblaze for macOS prior to 7.0.1.434, which stems from suffering improper certificate validation in the bztransmit helper...

QNAP QES Trust Management Issues Vulnerabilities

QNAP QES is a desktop operating system from China's QNAP Corporation that is primarily used for managing files. A trust management issue vulnerability exists in versions prior to QES 2.1.1 Build 20200515, which can be exploited by an attacker to log in with a hard-coded password...

ABB Symphony Plus Operations and ABB Symphony Plus Historian Trust Management Issue Vulnerabilities

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...

NEC ISM Client Trust Management Issue Vulnerability

NEC ISM Client is a client software from NEC Corporation that is used to manage NEC storage systems. NEC ISM Client has a trust management issue vulnerability that stems from the vulnerability of NEC ISM Client running on NEC Storage Manager or NEC Storage Manager Express to incorrect server...

Bilanc Shpk Programi Bilanc build Trust Management Issues Vulnerabilities

Bilanc Shpk Programi Bilanc is a software for generating balance sheets from Bilanc Shpk, Alphania. A vulnerability with trust management issues exists in Programi Bilanc build 014 31.01.2020 007 distribution and below. During installation, it defaults to using the account administrator and...

A breakthrough year for passwordless technology

As 2020 draws to a close, most of us are looking forward to putting this year in the rearview mirror. Since we depend even more on getting online for everything in our lives, we’re more than ready to be done with passwords. Passwords are a hassle to use, and they present security risks for users...

A breakthrough year for passwordless technology

As 2020 draws to a close, most of us are looking forward to putting this year in the rearview mirror. Since we depend even more on getting online for everything in our lives, we’re more than ready to be done with passwords. Passwords are a hassle to use, and they present security risks for users...

SolarWinds N-Central Trust Management Issue Vulnerability

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

Cross site request forgery (csrf)

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

Adrem Netcrunch Trust Management Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A trust management issue vulnerability exists in AdRem NetCrunch...

AdRem NetCrunch Trust Management Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. AdRem NetCrunch 10.6.0.4587 suffers from a Trust Management Issue...

SolarWinds N-Central 信任管理问题漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...