Security Bulletin: Multiple Java Vulnerabilities Affect IBM Connect:Direct Web Services

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by IBM Connect:Direct Web Services. These issues were disclosed as part of the IBM Java SDK updates in May 2019 Vulnerability Details CVE-ID: CVE-2019-10246 Description: Eclipse...

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to CVE-2018-25032

Summary Zlib is part of the base OS modules in all operand images in IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container is not directly vulnerable under standard operations, but custom use of the images may be vulnerable to denial of service. This...

RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer

The operators behind the Rig Exploit Kit have swapped the Raccoon Stealer malware for the Dridex financial trojan as part of an ongoing campaign that commenced in January 2022. The switch in modus operandi, spotted by Romanian company Bitdefender, comes in the wake of Raccoon Stealer temporarily...

Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2022-1956)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

demircihotel.com Cross Site Scripting vulnerability OBB-2662072

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-5348-3: Smarty vulnerabilities

USN-5348-1 fixed several vulnerabilities in Smarty. This update provides the fixes for CVE-2021-21408, CVE-2021-26119, CVE-2021-26120 and CVE-2021-29454 for Ubuntu 20.04 ESM. Original advisory details: David Gnedt and Thomas Konrad discovered that Smarty was incorrectly sanitizing the paths prese...

Debian: Security Advisory (DLA-3054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1306

creationtimestamp| type| source ---|---|--- 2022-06-18 11:47:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/204...

CVE-2018-1313

creationtimestamp| type| source ---|---|--- 2022-06-18 11:47:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/204...

CVE-2018-1304

creationtimestamp| type| source ---|---|--- 2022-06-18 11:47:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/204...

CVE-2018-25042

creationtimestamp| type| source ---|---|--- 2022-06-17 16:23:37+00:00| seen| https://t.me/cibsecurity/44727...

CVE-2018-25043

creationtimestamp| type| source ---|---|--- 2022-06-17 16:23:26+00:00| seen| https://t.me/cibsecurity/44717...

CVE-2018-25044

Technical details (affected products, components, vulnerable versions, root cause, fixes) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-25044 uTorrent Guest Account privileges management

A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The manipulation leads to privilege escalation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2018-25043 uTorrent PRNG improper authentication

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to...

CVE-2018-25042 uTorrent memory corruption

A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component...

CVE-2018-25042 uTorrent memory corruption

A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component...

CVE-2018-25042

CVE-2018-25042 affects uTorrent. The connected sources describe a memory-corruption vulnerability in an unknown part of the client that can be exploited remotely. Impact is implied as potentially severe (memory corruption with remote attack). The recommended mitigation is upgrading the affected c...

CVE-2018-25041 uTorrent JSON RPC Server privileges management

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2018-25041

A vulnerability in uTorrent’s JSON RPC Server allows remote privilege escalation. The issue affects an unspecified functionality of the JSON RPC Server; exploit has been disclosed publicly. Upgrading the affected component is recommended as the remediation; exact patched version is not specified ...