GSD-2022-1003052 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002731 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-32248

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a missing of node put in dcscb init in the ARM versatile component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2025-8391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the ARM: versatile component. The problem arises from the of find compatible node function, which returns a...

Schneider Electric SESU

1. EXECUTIVE SUMMARY CVSS v3 3.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Schneider Electric Software Update SESU Vulnerability: Insufficient Entropy 2. RISK EVALUATION Successful exploitation of this vulnerability could cause unintended connection from an internal...

Fedora: Security Advisory for x11vnc (FEDORA-2021-c5b679877e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei VRP Detection (SSH Login)

SSH login-based detection of Huawei Versatile Routing Platform VRP network devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

[SECURITY] Fedora 30 Update: elog-3.1.4-1.20190113git283534d97d5a.fc30

ELOG is part of a family of applications known as weblogs. Their general purpose is: 1. To make it easy for people to put information online in a chronological fashion, in the form of short, time-stamped text messages "entries" with optional HTML markup for presentation, and optional file...

[SECURITY] Fedora 28 Update: icecast-2.4.4-1.fc28

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

TIDoS Framework - The Offensive Web Application Penetration Testing Framework

TIDoS Framework is a comprehensive web-app audit framework. let's keep this simple Highlights :- The main highlights of this framework is: TIDoS Framework now boasts of a century+ of modules. A complete versatile framework to cover up everything from Reconnaissance to Vulnerability Analysis. Has ...

versatile-hpi-solutions.com XSS vulnerability

Open Bug Bounty ID: OBB-590841 Description| Value ---|--- Affected Website:| versatile-hpi-solutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-1444

Name of the Vulnerable Software and Affected Versions Intel SGX affected versions not specified Huawei VRP affected versions not specified Description The issue is related to the implementation of Intel Software Guard Extensions SGX technology and speculative execution in microprocessors. It may...

iTech StockPhoto Script 2.02 - SQL Injection

Exploit Title: iTech StockPhoto Script v2.02 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/stockphoto-script Version: 2.02 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected] Contact:...

Ubuntu-based PenTest Linux Distribution: BackBox

BackBox Linux is a penetration testing and security assessment oriented Linux distribution providing a network and systems analysis toolkit. It includes some of the most commonly known/used security and analysis tools, aiming for a wide spread of goals, ranging from web application analysis to...

UBUNTU-CVE-2016-7516

The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted VIFF file...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.26-2-versatile package of the Debian GNU/Linux operating system can be exploited, resulting in a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Huawei Versatile Routing Platform Version Detection

Binary data huaweivrpversion.nbin...

Huawei eSap Platform DoS (HWPSIRT-2014-0111)

The remote host is a Huawei device running a firmware version that is affected by a denial of service vulnerability. The issue stems from a heap overflow vulnerability in the firmware. A remote, unauthenticated attacker could exploit this vulnerability by sending malformed packets to cause...

CVE-2013-4633: Undefined Security Weakness

Huawei Seco Versatile Security Manager VSM before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a group configuration setting...

More Flame Modules Could Be Lurking

BROOKLYN, NY–After years of research and investigation into the cyber-espionage attacks that began with the discovery of Stuxnet and continued with Flame, Duqu and Gauss, there still are many details that are unknown. While researchers have a pretty good handle on many of the tools’ capabilities,...