SUSE: Security Advisory (SUSE-SU-2021:3770-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-7107 · Ldap +2 · Ldap +2

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 13.2.99.83 Tuleap Enterprise Edition versions prior to 13.1-6 Tuleap Enterprise Edition versions prior to 13.2-4 Description: The issue exists due to improper sanitization of the search filter built from the ldap id...

Phishing Scam Aims to Hijack TikTok ‘Influencer’ Accounts

A recently discovered phishing scam tried to takeover more than 125 high-profile user accounts on TikTok. Researchers said the campaign marks one of the first major attacks on “influencers” found on the TikTok social-media platform. Researchers at cloud email security provider Abnormal Security...

bind security and bug fix update

32:9.11.26-6 - Use random entropy to generate unique TKEY identifiers 1980916 32:9.11.26-5 - Fix possible assertion failure iscrefcountcurrent == 0 in freerbtdb 1953056...

.NET 6 bug fix and enhancement update

New Package Request: .NET 6 for AlmaLinux 8 dotnet6.0...

ALEA-2021:4351 .NET 6 bug fix and enhancement update

New Package Request: .NET 6 for AlmaLinux 8 dotnet6.0...

GHSA-P6RW-44Q7-3FW4 Stored XSS in Jupyter nbdime

Impact Improper handling of user controlled input caused a stored cross-site scripting XSS vulnerability. All previous versions of nbdime are affected. Patches Security patches will be released for each of the major versions of the nbdime packages since version 1.x of the nbdime python package...

fotoprotools.nl Improper Access Control vulnerability OBB-2241601

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ribbons.com Cross Site Scripting vulnerability OBB-2241268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wiescisokolowskie.pl Cross Site Scripting vulnerability OBB-2240838

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

beeldvanger.nl Improper Access Control vulnerability OBB-2240488

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

findcourses.co.uk Cross Site Scripting vulnerability OBB-2240365

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vanilar.ru Cross Site Scripting vulnerability OBB-2239407

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-41990 affecting package strongswan 5.7.2-6

CVE-2021-41990 affecting package strongswan 5.7.2-6. A patched version of the package is available...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9534)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9534 advisory. - Bluetooth: hciuart: check for missing tty operations Vladis Dronov Orabug: 30244627 CVE-2019-10207 CVE-2019-10207 - Bluetooth: hciuart: Add basic...

The Pixel 6 Chip’s Best Upgrade Isn’t Speed. It’s Security

Google’s new flagship smartphone is its most secure yet, thanks to a little vertical integration...

CentOS 8 : redis:6 (CESA-2021:3945)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3945 advisory. - redis: Lua scripts can overflow the heap-based Lua stack CVE-2021-32626 - redis: Integer overflow issue with Streams CVE-2021-32627 - redis: Integer...

SUSE: Security Advisory (SUSE-SU-2021:3473-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : redis:6 (ELSA-2021-3945)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3945 advisory. - fix denial of service via Redis Standard Protocol RESP request CVE-2021-32675 - fix lua scripts can overflow the heap-based Lua stack CVE-2021-32626 ...

SUSE: Security Advisory (SUSE-SU-2021:3469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...