14073 matches found
BELL-CVE-2021-43976 CVE-2021-43976 does not affect BellSoft software
Bulletin has no description...
CVE-2021-42114
A Rowhammer flaw was found in the latest DDR4 DRAM hardware chips. This flaw is different from the previously known attack CVE-2020-10255 by non-uniform patterns of memory access. These DDR4 DRAM hardware chips implement a Target Row Refresh TRR mitigation to prevent a Rowhammer flaw-induced bit...
Cybercriminals Target Alibaba Cloud for Cryptomining, Malware
Cybercriminals are targeting Alibaba Elastic Computing Service ECS instances, disabling certain security features to further their cryptomining goals. Alibaba offers a few unique options that make it a highly attractive target for attackers, researchers noted. Register now for our LIVE event!...
The vulnerability in the software web interface of F-Secure Internet Gatekeeper allows a hacker to trigger a service failure.
The vulnerability of the F-Secure Internet Gatekeeper software’s web interface relates to the use of the assert function or similar operators when processing user name parameters. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted HT...
Exploit for CVE-2017-17562
GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/h...
ohmyzsh 操作系统命令注入漏洞
ohmyzsh is an open source, community-driven framework for managing your zsh configuration. An operating system command injection vulnerability exists in ohmyzsh, which stems from the fact that ohmyzsh's omzurldecode function uses an eval to decode input, which can be used to inject commands. This...
Exploit for OS Command Injection in Systeminformation
the CVE-2021-21315's exploit code wrote with Rust lang I'm ru...
Ubuntu: Security Advisory (USN-5135-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with opensslencrypt function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data...
binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()
There's a flaw in the BFD library of binutils. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption...
new packages: gcc-toolset-11-valgrind
An update is available for gcc-toolset-11-valgrind. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versio...
ALBA-2021:4258 new packages: gcc-toolset-11-annobin
GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11-annobin packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked from...
new packages: gcc-toolset-11-systemtap
GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11-systemtap packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked fro...
new packages: gcc-toolset-11-dwz
GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11-dwz packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked from the...
llvm-toolset:rhel8 bug fix and enhancement update
LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the LLDB debugger, and related tools for code analysis. For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For...
new packages: gcc-toolset-11
GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11 packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked from the...
Certipy - Python Implementation For Active Directory Certificate Abuse
Certipy is a Python tool to enumerate and abuse misconfigurations in Active Directory Certificate Services AD CS. Based on the C variant Certify from @harmj0y and @tifkin. Installation $ python3 setup.py install Remember to add the Python scripts directory to your path. Usage $ certipy -h usage:...
PYSEC-2021-637
TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's savedmodelcli tool is vulnerable to a code injection as it calls eval on user supplied strings. This can be used by attackers to run arbitrary code on the plaform where the CLI tool runs. However, given...
