OSnova User Management Insecure Defaults

The vulnerability of the user management utilities useradd and adduser in the operating system is related to the use of insecure default settings. Exploiting this vulnerability can allow an attacker to gain access to protected information...

[SECURITY] Fedora 33 Update: bluez-5.60-1.fc33

Utilities for use in Bluetooth applications: - hcitool - hciattach - hciconfig - bluetoothd - l2ping - rfcomm - sdptool - bluetoothctl - btmon - hcidump - l2test - rctest - gatttool - start scripts Red Hat - pcmcia configuration files - avinfo The BLUETOOTH trademarks are owned by Bluetooth SIG,...

Low: 389-ds:1.4 security and bug fix update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succee...

RLSA-2021:3079 Low: 389-ds:1.4 security and bug fix update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succee...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-29736)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Go-Shellcode - A Repository Of Windows Shellcode Runners And Supporting Utilities

go-shellcode is a repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques. The available Shellcode runners include: CreateFiber CreateProcess CreateProcessWithPipe CreateRemoteThread CreateRemoteThreadNati...

CVE-2021-3655

A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory...

[SECURITY] Fedora 34 Update: bluez-5.60-2.fc34

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - l2ping - l2test - mpris-proxy - rctest The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

Fedora: Security Advisory for bluez (FEDORA-2021-ae7251c31b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for systemd (FEDORA-2021-166e461c8d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-37555

TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled...

PT-2021-21715 · Busybox +1 · Busybox +1

Name of the Vulnerable Software and Affected Versions: TX9 Automatic Food Dispenser version 3.2.57 Description: The issue allows access to a shell as root/superuser. To connect, the telnet service is used on port 23 with the default password 059AnkJ for the root account. The user can then downloa...

pcs security and bug fix update

An update for pcs is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links i...

USN-4336-2 binutils vulnerabilities

USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a...

Solaris 10 (sparc) : 153100-03

SunOS 5.10: Install and Patch Utilities Patch. Date this patch was last updated by Sun : Jul/19/21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc"; if...

Siemens JT Utilities Null Pointer Dereference Vulnerability (CNVD-2021-51443)

Siemens JT Utilities is a software application from Siemens Germany. A security vulnerability exists in Siemens JT Utilities, which can be exploited by attackers to cause a denial of service condition in the application...

Siemens JT Utilities Null Pointer Dereference Vulnerability

Siemens JT Utilities is a software application from Siemens Germany. A security vulnerability exists in Siemens JT Utilities, which can be exploited by an attacker to cause a denial of service condition in an application due to a lack of iterator validity checking when parsing specially designed ...

Unspecified Vulnerability in Siemens JT Utilities

Siemens JT Utilities is a software application from Siemens Germany. An unspecified vulnerability exists in Siemens JT Utilities, which originates when parsing a specially designed JT file, calling a hash function with incorrect parameters can cause the application to crash. An attacker could use...

CVE-2021-33714

A vulnerability has been identified in JT Utilities All versions V13.0.2.0. When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NULL pointer deference condition, causing the application to crash. An attacker could leverage this vulnerability to cause ...

CVE-2021-33715

A vulnerability has been identified in JT Utilities All versions V13.0.2.0. When parsing specially crafted JT files, a race condition could cause an object to be released before being operated on, leading to NULL pointer deference condition and causing the application to crash. An attacker could...