A Privacy Panic Flares Up in India After Police Pull Payment Data

Nonprofit donors had their information given to law enforcement without consent, highlighting limited data protections in the world’s largest democracy...

How the FBI quietly added itself to criminals’ instant message conversations

Motherboard has disclosed some information about Operation Trojan Shield, in which the FBI intercepted messages from thousands of encrypted phones around the world. These messages are now used in courts across the world as corroborating evidence. Operation Trojan Shield The US Federal Bureau of...

Huawei EulerOS: Security Advisory for selinux-policy (EulerOS-SA-2022-2012)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_21-2022-06) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10035-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10035-1 advisory. - Use after free in Base. CVE-2022-2156 - Use after free in Interest groups. CVE-2022-2157 - Type Confusion in V8. CVE-2022-2158 -...

OPENSUSE-SU-2022:10036-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 103.0.5060.53 boo1200783 CVE-2022-2156: Use after free in Base CVE-2022-2157: Use after free in Interest groups CVE-2022-2158: Type Confusion in V8 CVE-2022-2160: Insufficient policy enforcement in DevTools CVE-2022-2161: Use after fre...

OPENSUSE-SU-2022:10035-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 103.0.5060.53 boo1200783 CVE-2022-2156: Use after free in Base CVE-2022-2157: Use after free in Interest groups CVE-2022-2158: Type Confusion in V8 CVE-2022-2160: Insufficient policy enforcement in DevTools CVE-2022-2161: Use after fre...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10035-1 Rating: important References: 1200783 Cross-References: CVE-2022-2156 CVE-2022-2157 CVE-2022-2158 CVE-2022-2160 CVE-2022-2161 CVE-2022-2162 CVE-2022-2163 CVE-2022-2164 CVE-2022-2165 Affected Products:...

CVE-2022-21829

Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concretesecure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http...

SUSE-SU-2022:2173-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. bnc1200015 - CVE-2022-1975: Fixed a...

Police seize and dismantle massive phishing operation

Europol has coordinated a joint operation to arrest members of a cybercrime gang and effectively dismantle their campaigns that netted million in Euros. This operation also led the Belgian Police Police Fédérale/Federale Politie and the Dutch Police Politie to nine arrests, 24 house searches, and...

Chromium: CVE-2022-2160 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Debian DSA-5168-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5168 advisory. - Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to...

KLA12572 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Base can be exploited to cause denial of...

FreeBSD : chromium -- multiple vulnerabilities (b2a4c5f1-f1fe-11ec-bcd2-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b2a4c5f1-f1fe-11ec-bcd2-3065ec8fd3ec advisory. - Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an...

Secheron SEPCOS Control and Protection Relay

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Secheron Equipment: SEPCOS Control and Protection Relay Vulnerabilities: Improper Enforcement of Behavioral Workflow, Lack of Administrator Control over Security, Improper Privilege Management,...

PT-2022-3065

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.53 Description The issue is related to insufficient policy enforcement in DevTools, allowing an attacker to obtain potentially sensitive information from a user's local files via a crafted HTML page i...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google Inc. in the United States. A security vulnerability exists in Google Chrome that stems from insufficient policy enforcement in the file system API...

Interpol’s First Light operation smashes crime on a global scale

A large-scale Interpol operation has resulted in arrested and ill-gotten gains seizures galore. Operation First Light took place between March and May of this year. It involved 76 countries taking social engineers and telecommunications fraudsters to task, with multiple wins for those involved...

SUSE-SU-2022:2104-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated. The following security bugs were fixed: - CVE-2022-0168: Fixed a NULL pointer dereference in smb2ioctlqueryinfo. bsc1197472 - CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user...