The vulnerability of the Garbage Collector component in Firefox browsers allows a hacker to trigger a service failure.

The vulnerability of the Garbage Collector component in Firefox browsers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Ransomware attack on US healthcare debt collector exposes 1.9m patient records

By Waqas The company maintains that it was able to "detect and stop" the "sophisticated ransomware attack" on February 26,… This is a post from HackRead.com Read the original post: Ransomware attack on US healthcare debt collector exposes 1.9m patient records...

SUSE: Security Advisory (SUSE-SU-2022:2174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple Vulnerabilities found in Apache Tika used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary Multiple Vulnerabilities found in Apache Tika used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections Vulnerability Details CVEID:CVE-2022-30126 DESCRIPTION: Apache Tika is vulnerable to ...

SUSE-SU-2022:2174-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module bsc1198511. - Update to 3.9.13: - Core and Builtins - gh-92311: Fixed a bug where setting frame.flineno to jump over a list comprehension could misbehave or crash. - gh-92112: Fix...

Security Bulletin: CVE-2021-35603 may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary CVE-2021-35603 was disclosed as part of the Oracle October 2021 Critical Patch Update. Vulnerability Details CVEID: CVE-2021-35603 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow an unauthenticated attacker to obtain sensitive information...

Security Bulletin: CVE-2020-35550 may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary CVE-2021-35550 was disclosed as part of the Oracle October 2021 Critical Patch Update. Vulnerability Details CVEID: CVE-2021-35550 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow an unauthenticated attacker to obtain sensitive information...

Malicious Package

Overview helix-rum-collector is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious code in github-helpscout-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea56364b70dfd24af3b94c8e4d77d2c9b285cd18d9863e350c651f446d6060ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3373 Malicious code in github-helpscout-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea56364b70dfd24af3b94c8e4d77d2c9b285cd18d9863e350c651f446d6060ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tracker-radar-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c382860bcfb985e86aa7b648770475c9deebd558eb7815ffcd10f708348039a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6622 Malicious code in tracker-radar-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c382860bcfb985e86aa7b648770475c9deebd558eb7815ffcd10f708348039a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-RU-2022:2145-1 Recommended update for SUSE Manager Proxy 4.1

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Adapted to build on Enterprise Linux. - Fix build for Red Hat 7 - Require Go = 1.14 also for CentOS - Add support for CentOS - Replace %?systemdrequires with %?systemdordering...

Malicious code in helix-rum-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002b86a6a7d367dc196dbac6c12dff9827ed2b0a483cb8520063a9f3e90c513b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3592 Malicious code in helix-rum-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002b86a6a7d367dc196dbac6c12dff9827ed2b0a483cb8520063a9f3e90c513b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-21806

A use-after-free vulnerability exists in the mipscollector appsrvserver functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to remote code execution. The device is exposed to attacks from the network...

Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has addressed the relevant CVEs. Vulnerability Details CVEID: CVE-2019-12086 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to obtain...

Anker Eufy Homebase 资源管理错误漏洞

Anker Eufy Homebase is a wireless home security camera system from Eufy USA. A security vulnerability exists in Anker Eufy Homebase 2 version 2.1.8.5h that stems from a post-release reuse issue in the mipscollector appsrvserver function...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...