赛克艾威-漏洞预警

SecEvery - Vulnerability Warning

Linux Kernel Heap-Based Buffer Overflow

北京赛克艾威科技有限公司

2024-08-21

Linux kernel contains a heap\-based buffer overflow vulnerability in the legacy\_parse\_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.

Dahua IP Camera Authentication Bypass Vulnerability

北京赛克艾威科技有限公司

2024-08-21

Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication.

Dahua IP Camera Authentication Bypass Vulnerability

北京赛克艾威科技有限公司

2024-08-21

Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.

用友 NC psnImage SQL注入漏洞

北京赛克艾威科技有限公司

2024-08-12

暂无

Nacos Jraft 文件读写漏洞

北京赛克艾威科技有限公司

2024-08-15

Nacos 提供了一组简单易用的特性集,帮助您快速实现动态服务发现、服务配置、服务元数据及流量管理。2024年8月,官方披露 Nacos Jraft 文件读写漏洞。原因是部分Jraft请求磁盘操作时未限制文件路径导致,官方已发布 2.4.1和1.4.8 版本修复该漏洞。