PT-2022-18611

Name of the Vulnerable Software and Affected Versions libsapeextractor library versions prior to SMR Apr-2022 Release 1 Description The issue is related to an improper size check in the sapefd parse meta HEADER old function, which allows for an out of bounds read. This can be triggered by a craft...

Leaking password protected articles content due to improper access control

Description Any user who can publish their article can protect it using a password before publishing. So, a valid password to the article is required to view the contents of the article. But when a request is made to article /2022/04/10/ the UI show it requires a password to view content. But the...

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia's military intelligence service, with the goal of neutralizing its attacks on Ukraine. "We have since re-directed these domains to a sinkhole...

USN-5368-1: Linux kernel vulnerabilities

It was discovered that the BPF verifier in the Linux kernel did not properly restrict pointer types in certain situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-23222 It was discovered that the network traffic contro...

Meta Tries to Break the End-to-End Encryption Deadlock

A new report commissioned by Meta aims to redefine comprehensive encryption as essential to protecting human rights...

Fake Cops Scammed Apple and Meta to Get User Data

Plus: Lapsus$ teens hit with charges, Wyze's security screwup, and Russia's cyber rampage...

Fedora: Security Advisory for kernel (FEDORA-2022-8e3ac65667)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for kernel (FEDORA-2022-eb323bcd80)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: kernel-5.16.18-200.fc35

The kernel meta package...

[SECURITY] Fedora 34 Update: kernel-5.16.18-100.fc34

The kernel meta package...

NETGEAR R8500 Command Injection Vulnerability

The NETGEAR R8500 is a wireless router from the American company Netgear. A security vulnerability exists in the NETGEAR R8500, which can be exploited by an attacker to execute arbitrary commands e.g. telnetd via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters of...

Meta’s Universal Translator Will Not Be the End of Human Translation

By Owais Sultan Will Metas Universal Translator be the end of human translations in the translation agency? This article examines why… This is a post from HackRead.com Read the original post: Metas Universal Translator Will Not Be the End of Human Translation...

Meta Facebook Messenger security vulnerability

Meta Facebook Messenger is an instant messaging software/application from Meta, Inc. that provides text and voice services. A security vulnerability exists in Meta Facebook Messenger that stems from an inability to properly present URI messages to the user, which could lead to URI spoofing via...

[SECURITY] Fedora 35 Update: kernel-5.16.15-201.fc35

The kernel meta package...

Facebook Hit With $18.6 Million GDPR Fine Over 12 Data Breaches in 2018

The Irish Data Protection Commission DPC on Tuesday slapped Facebook and WhatsApp owner Meta Platforms a fine of €17 million $18.6 million for a series of security lapses that occurred in violation of the European Union's GDPR laws in the region. "The DPC found that Meta Platforms failed to have ...

WordPress SEO 301 Meta plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. WordPress plugin is a WordPress application plugin. WordPress SEO 301 Meta plugin 1.9.1 and earlier versions are vulnerable to a cross-site scripting vulnerability that stems from the plugin's...

Cross site scripting

The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0701: Improper Neutralization of Input During Web Page Generation

The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2022-13371

Name of the Vulnerable Software and Affected Versions SEO 301 Meta WordPress plugin versions 1.9.1 and earlier Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks by exploiting unescaped Request and Destination settings in the plugin, even wh...

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. WordPress plugin is a WordPress application plugin. WordPress SEO 301 Meta plugin 1.9.1 and earlier versions are vulnerable to a cross-site scripting vulnerability that stems from the plugin's...