New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

A newly devised technique leverages a Windows accessibility framework called UI Automation UIA to perform a wide range of malicious activities without tipping off endpoint detection and response EDR solutions. "To exploit this technique, a user must be convinced to run a program that uses UI...

[SECURITY] [DLA 3984-1] zabbix security update

Debian LTS Advisory DLA-3984-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2024 https://wiki.debian.org/LTS Package : zabbix Version : 1:5.0.45+dfsg-1+deb11u1 CVE ID : CVE-2024-36464 CVE-2024-42330 CVE-2024-42331 CVE-2024-42332 CVE-2024-42333 Debian...

Debian dla-3984 : zabbix-agent - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3984 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3984-1 [email protected]...

SQL Injection to RCE on FinanceChatLlamaPack

Summary The Finance Chat Llama Pack implements a hierarchical agent based on LLM for financial chat and information extraction. It includes an agent called 'database agent' for interacting with a PostgreSQL database. However, due to the lack of protections in the runsqlquery function on the...

Audio Multimodality: Expanding AI Interaction with Spring AI and OpenAI

This blog post is co-authored by our great contributor Thomas Vitale. OpenAI provides specialized models for speech-to-text and text-to-speech conversion, recognized for their performance and cost-efficiency. Spring AI integrates these capabilities via Voice-to-Text and Text-to-Speech TTS. The ne...

RHEL 8 : Red Hat OpenStack Platform 16.2 (python-werkzeug) (RHSA-2024:10696)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:10696 advisory. Werkzeug is a WSGI utility module. It includes a debugger, request and response objects, HTTP utilities to handle entity tags, cache control headers...

Fedora 40 : php (2024-e0d390d35b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e0d390d35b advisory. PHP version 8.3.14 21 Nov 2024 CLI: Fixed bug GH-16373 Shebang is not skipped for router script in cli-server started through shebang. ilutov Fixed...

Security Bulletin: IBM Analytics Content Hub is affected by security vulnerabilities

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Analytics Content Hub. Additionally, IBM Analytics Content Hub is vulnerable to Buffer Overflow, Server Side Request Forgery SSRF and Improper Error Handling vulnerabilities. Please refer to the tabl...

Release Information for Veeam Backup for Salesforce 3 Cumulative Patches

Requirements Please confirm that you are running Veeam Backup for Salesforce 3 build 3.1.2.3957 or earlier before upgrading. You can find the currently installed build number in the Configuration About section. After the upgrade, the Veeam Backup for Salesforce build number will be3.2.1.4038...

RHEL 9 : RHOSP 17.1.4 (python-webob) (RHSA-2024:9983)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9983 advisory. WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified...

RHEL 9 : RHOSP 17.1.4 (python-werkzeug) (RHSA-2024:9976)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9976 advisory. Werkzeug is a WSGI utility module. It includes a debugger, request and response objects, HTTP utilities to handle entity tags, cache control headers,...

RHEL 8 : RHOSP 17.1.4 (python-werkzeug) (RHSA-2024:9975)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9975 advisory. Werkzeug is a WSGI utility module. It includes a debugger, request and response objects, HTTP utilities to handle entity tags, cache control headers,...

RHEL 8 : RHOSP 17.1.4 (python-webob) (RHSA-2024:9989)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9989 advisory. WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified...

RHEL 8 : squid:4 (RHSA-2024:9815)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9815 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: Denial of...

RHEL 8 : squid:4 (RHSA-2024:9814)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9814 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: Denial of...

RHEL 9 : gnome-shell (RHSA-2024:9915)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9915 advisory. GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface...

RHEL 8 : squid:4 (RHSA-2024:9813)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9813 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: Denial of...

Fedora 41 : php (2024-3891a08c9e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3891a08c9e advisory. PHP version 8.3.14 21 Nov 2024 CLI: Fixed bug GH-16373 Shebang is not skipped for router script in cli-server started through shebang. ilutov Fixed...

Samba Missing ACL Vulnerability (CVE-2020-25720)

Samba is prone to a missing access control list ACL vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

RHEL 8 : squid:4 (RHSA-2024:9644)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9644 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid:...