‼ CVE-2021-0698 ‼
📖 Read
via "National Vulnerability Database".
In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-236848165📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20122 ‼
📖 Read
via "National Vulnerability Database".
The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232441339📖 Read
via "National Vulnerability Database".
‼ CVE-2021-39815 ‼
📖 Read
via "National Vulnerability Database".
The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232440670📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0947 ‼
📖 Read
via "National Vulnerability Database".
The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies the buffer to userspace. The method TLServerDiscoverStreamsKM may fail for several reasons including invalid sizes. If this method fails the buffer will be left uninitialized and despite the error will still be copied to userspace. Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236838960📖 Read
via "National Vulnerability Database".
⚠ Bitcoin ATMs leeched by attackers who created fake admin accounts ⚠
📖 Read
via "Naked Security".
The criminals didn't implant any malware. The attack was orchestrated via malevolent configuration changes.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Breaching airgap security: using your phone’s compass as a microphone! ⚠
📖 Read
via "Naked Security".
One bit per second makes the Voyager probe data rate seem blindingly fast. But it's enough to break your security assumptions...📖 Read
via "Naked Security".
Naked Security
Breaching airgap security: using your phone’s gyroscope as a microphone
One bit per second makes the Voyager probe data rate seem blindingly fast. But it’s enough to break your security assumptions…
🕴 VMware LPE Bug Allows Cyberattackers to Feast on Virtual Machine Data 🕴
📖 Read
via "Dark Reading".
An insider threat or remote attacker with initial access could exploit CVE-2022-31676 to steal sensitive data and scoop up user credentials for follow-on attacks.📖 Read
via "Dark Reading".
Dark Reading
VMware LPE Bug Allows Cyberattackers to Feast on Virtual Machine Data
An insider threat or remote attacker with initial access could exploit CVE-2022-31676 to steal sensitive data and scoop up user credentials for follow-on attacks.
‼ CVE-2021-4209 ‼
📖 Read
via "National Vulnerability Database".
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4204 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4158 ‼
📖 Read
via "National Vulnerability Database".
A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3488 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4122 ‼
📖 Read
via "National Vulnerability Database".
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3998 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4125 ‼
📖 Read
via "National Vulnerability Database".
It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4189 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4159 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34836 ‼
📖 Read
via "National Vulnerability Database".
Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34838 ‼
📖 Read
via "National Vulnerability Database".
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2978 ‼
📖 Read
via "National Vulnerability Database".
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4178 ‼
📖 Read
via "National Vulnerability Database".
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4037 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.📖 Read
via "National Vulnerability Database".