Fedora: Security Advisory for chromium (FEDORA-2022-d1a15f9cdb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-regex (FEDORA-2022-ceb3e03c5e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP5 : gdk-pixbuf2 (EulerOS-SA-2022-1320)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and...

EulerOS 2.0 SP5 : polkit (EulerOS-SA-2022-1335)

According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow...

EulerOS 2.0 SP5 : httpd (EulerOS-SA-2022-1326)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The Apache httpd...

EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2022-1318)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included 'sshdeletekeys: 0', disabling cloud-init's deletion of ssh host...

EulerOS 2.0 SP5 : fuseiso (EulerOS-SA-2022-1319)

According to the versions of the fuseiso package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service...

PT-2022-2587

Name of the Vulnerable Software and Affected Versions curl versions 7.33.0 through 7.82.0 Description An improper authentication issue exists, potentially allowing the reuse of OAUTH2-authenticated connections without ensuring the connection was authenticated with the same credentials as set for...

Atom CMS Remote Code Execution Vulnerability

Atom CMS is a content management system. A remote code execution vulnerability exists in Atom CMS version 2.0, which stems from /admin/uploads.php failing to properly filter the special elements of the construct snippet. An attacker could exploit this vulnerability to cause arbitrary code executi...

Icinga Web 2 Detection (Linux/Unix SSH Login)

SSH login-based detection of Icinga Web 2. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.170046...

Nearly 34 Ransomware Variants Observed in Hundreds of Cyberattacks in Q4 2021

As many as 722 ransomware attacks were observed during the fourth quarter of 2021, with LockBit 2.0, Conti, PYSA, Hive, and Grief emerging as the most prevalent strains, according to new research published by Intel 471. The attacks mark an increase of 110 and 129 attacks from the third and second...

LockBit 2.0 Ransomware affiliates targeting Renowned Organizations

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Since September 2021, LockBit 2.0 has targeted 500+ organizations in vital areas globally. The most recent attack targeted well-known tire producer Bridgestone, software behemoth Accenture, and the French Ministry of Justice...

CVE-2022-26967

GPAC 2.0 allows a heap-based buffer overflow in gfbase64encode. It can be triggered via MP4Box...

Heap overflow

GPAC 2.0 allows a heap-based buffer overflow in gfbase64encode. It can be triggered via MP4Box...

UBUNTU-CVE-2022-26967

GPAC 2.0 allows a heap-based buffer overflow in gfbase64encode. It can be triggered via MP4Box...

CVE-2022-26967

CVE-2022-26967 concerns GPAC 2.0, where a heap-based buffer overflow in the function gf_base64_encode can be triggered via the MP4Box component. Public sources in the connected documents consistently describe this as a GPAC memory corruption issue with potential impact to affected systems. The De...

CVE-2022-26967

Removed by vendor...

CVE-2022-26967

GPAC 2.0 allows a heap-based buffer overflow in gfbase64encode. It can be triggered via MP4Box...

SUSE: Security Advisory (SUSE-SU-2022:0805-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ransomware: February 2022 review

The Malwarebytes Threat Intelligence team continuously monitors the threat landscape to stay on top of existing and emerging attacks. In this February 2022 ransomware review, we go over some the most successful ransomware incidents based on both open source and dark web intelligence. BlackByte...