About the security content of watchOS 7.3

About the security content of watchOS 7.3 This document describes the security content of watchOS 7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

openSUSE Security Update : openssh (openSUSE-2020-2298)

This update for openssh fixes the following issues : - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 - Fixed an issue where oracle cluster with cluvfy using...

Threat Source newsletter (Jan. 21, 2021)

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We know it’s hard to focus on anything happening outside of Washington, D.C. this week. But we would be remiss if we didn’t mention the exciting news that the Snort 3 GA is officially out now! This update has been literally years ...

WAGO M&M Software fdtCONTAINER (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: M&M Software GmbH, a subsidiary of WAGO Kontakttechnik Equipment: fdtCONTAINER Vulnerability: Deserialization of Untrusted Data 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

Ubuntu 18.04 LTS / 20.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-4689-3)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4689-3 advisory. It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that allowed user-mode clients to access...

Vulnerability Spotlight: Multiple vulnerabilities in PrusaSlicer

Lilith of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered two out-of-bounds write vulnerabilities in Prusa Research’s PrusaSlicer. Prusa Slicer is an open-source 3-D printer slicing program forked off Slic3r that can convert various 3-D model fil...

CVE-2021-3177

Python 3.x through 3.9.1 has a buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to cdouble.fromparam. This occurs because sprintf is...

CVE-2021-25295

OpenCATS through 0.9.5-3 has multiple Cross-site Scripting XSS issues...

CVE-2021-25295

OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) vulnerabilities. Affected product is OpenCATS (v0.9.5-3 and earlier per CNVD/NVD entries). The issue arises in the web application, with XSS described across multiple CVE records and mirrored in Red Hat, CNVD, OSV, and CVE registrie...

OpenCats 跨站脚本漏洞

OpenCATS is a free open source candidate/applicant tracking system designed to allow recruiters to manage the hiring process from job posting and candidate application to candidate selection and submission. A cross-site scripting vulnerability exists in OpenCATS 0.9.5-3 and earlier versions. An...

OpenCats 代码问题漏洞

OpenCATS is a free open source candidate/applicant tracking system designed to allow recruiters to manage the hiring process from job posting and candidate application to candidate selection and submission. A remote code execution vulnerability exists in OpenCATS version 0.9.5-3 and earlier. The...

[SECURITY] Fedora 32 Update: adplug-2.3.3-1.fc32

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

January 2021 Patch Tuesday – 83 Vulnerabilities, 10 Critical, One Zero Day, Adobe

This month’s Microsoft Patch Tuesday addresses 83 vulnerabilities. The 10 Critical vulnerabilities cover Windows codecs, Office, HEVC video extensions, RPC runtime, and several other workstation vulnerabilities. Adobe released patches today for Photoshop, Campaign Classic, InCopy, Illustrator,...

Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content

Adobe Systems has patched seven critical vulnerabilities, which impact Windows, macOS and Linux users. The impact of the serious flaws range from arbitrary code execution to sensitive information disclosure. The software company’s regularly scheduled Tuesday security updates impact a slew of its...

AZL-34969 CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

In-the-Wild Series: Android Post-Exploitation

This is part 5 of a 6-part series detailing a set of vulnerabilities found by Project Zero being exploited in the wild. To read the other parts of the series, see the introduction post. Posted by Maddie Stone, Project Zero A deep-dive into the implant used by a high-tier attacker against Android...

[ASA-202101-24] atftp: denial of service

Arch Linux Security Advisory ASA-202101-24 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-6097 Package : atftp Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1395 Summary ======= The package atftp before version...

New Surface PCs enable virtualization-based security (VBS) by default to empower customers to do more, securely

VBS and HVCI-enabled devices help protect from advanced attacks Escalation of privilege attacks are a malicious actor’s best friend, and they often target sensitive information stored in memory. These kinds of attacks can turn a minor user mode compromise into a full compromise of your OS and...

Command Execution Vulnerability in CMCC R3S-3 of CMCC Internet of Things Ltd (CNVD-2021-05105)

The CMCC R3S-3 is a router. A command execution vulnerability exists in the CMCC R3S-3 of CMCC IoT Ltd. An attacker can exploit the vulnerability to perform remote code execution as root on the device...

CMCC R3S-3 at CMCC IoT Ltd. is vulnerable to logic flaws

The CMCC R3S-3 is a router. A logic flaw vulnerability exists in the CMCC R3S-3 of CMCC Internet of Things Ltd. An attacker can exploit the vulnerability to remotely and arbitrarily change the password of the management side...