Moxa TN-5900 versions 3.1 and below suffer from an issue where a user who has authenticated to the management web application is able to leverage a command injection vulnerability in the p12 processing code of the certificate management function web_CERMGMTUpload.
35bd8ec3c5b38937aa9d5775e8ed2feaacd3dfed7c92d6ae96cb03bf16903bcbMoxa TN-5900 versions 3.1.0 and below use an insecure method to validate firmware updates. A malicious user with access to the management interface can upload arbitrary code in a crafted
2ac55dc0e94a52eae63ae9272eda3788cbe1002c37fa22d4db10498c8ab74404Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.
0c7d88bfa2ec8e17e6e27158fabfb1d05982ede3138138b44a0f3ac6ffba5545OpenStego is a tool implemented in Java for generic steganography, with support for password-based encryption of the data. It supports plugins for various steganographic algorithms (currently, only Least Significant Bit algorithm is supported for images).
57fc287baeb0aa364ceccef21e189501f38c3874e2bfefe94eae52e120cfe458Ubuntu Security Notice 5257-1 - It was discovered that ldns incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
2b6088f6f83097386ffd5abe53b0d3fdcc64b8809be1c71e45e20ba068ea1076Red Hat Security Advisory 2022-0323-02 - nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.
4f03d3e49396720f7d02b33aa62543a41ba6d85be14ea7d9fefcdfa52b68570fGentoo Linux Security Advisory 202201-2 - Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code. Versions less than 97.0.4692.99 are affected.
2dbbc279200448aceb43b066084d0822ec3adee226da927d27480d7db8c667b1Backdoor.Win32.Tiny.c malware suffers from a code execution vulnerability.
35a3c52d44324e3f4cf2499f3c66332921189c063621280452bfaba99d06ed98HackTool.Win32.Muzzer.a malware suffers from a buffer overflow vulnerability.
54fcf39b94915d80d49f91a92a28c62be7c5742060e8f0336bbc7ddb4d902acaApple Security Advisory 2022-01-26-7 - Safari 15.3 addresses code execution and use-after-free vulnerabilities.
2c2c5bda2399dc0598476633419c0f81127d657a216bc5ced1fa3382ba9c0654Apple Security Advisory 2022-01-26-6 - watchOS 8.4 addresses buffer overflow, code execution, path sanitization, and use-after-free vulnerabilities.
150c09cb44d7b8e021226ecd63ddebc6e245fd4baa1284b64a21d3d2465ef7a5Apple Security Advisory 2022-01-26-5 - tvOS 15.3 addresses buffer overflow, code execution, information leakage, path sanitization, and use-after-free vulnerabilities.
0be01c11d9ebbe4440f34e9d50699c340c19d3e3c09d686cdc44dd9e5b029551Apple Security Advisory 2022-01-26-4 - Security Update 2022-001 Catalina addresses buffer overflow, bypass, code execution, and information leakage vulnerabilities.
3937d1e993ac5e7a839c5d351bb6bd3525dcfdfa13d9bf06418bfe8cb69e27e4Apple Security Advisory 2022-01-26-3 - macOS Big Sur 11.6.3 addresses buffer overflow, bypass, code execution, information leakage, and path sanitization vulnerabilities.
f520f042d8ee44dcf1a2719becc8e8848d4c8695467157de92455304298e28e3Apple Security Advisory 2022-01-26-2 - macOS Monterey 12.2 addresses buffer overflow, code execution, information leakage, out of bounds write, path sanitization, and use-after-free vulnerabilities.
b1b9147ed80f5a1c3401258628ec67388ba31d66bae4f5e0c944169a87679302Apple Security Advisory 2022-01-26-1 - iOS 15.3 and iPadOS 15.3 addresses buffer overflow, code execution, information leakage, path sanitization, and use-after-free vulnerabilities.
28c6a19af86c915e22c2c56dbdf1e9006b2dac52398c520d34ac14568e27f88bFoxit PhantomPDF versions prior to 10.1.5 suffered from an arbitrary file write vulnerability.
11af0bcd3ea7ad58b20f67aa140f007bb8efebed895ca2b58bc01ba8446557d9
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed