New Stealthy Shikitega Malware Targeting Linux Systems and IoT Devices

A new piece of stealthy Linux malware called Shikitega has been uncovered adopting a multi-stage infection chain to compromise endpoints and IoT devices and deposit additional payloads. "An attacker can gain full control of the system, in addition to the cryptocurrency miner that will be executed...

Trend Micro HouseCall Privilege Escalation

The vulnerability of the Trend Micro HouseCall antivirus protection tool relates to the improper assignment of privileges. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Ransomware Attackers Abuse Genshin Impact Anti-Cheat System to Disable Antivirus

A vulnerable anti-cheat driver for the Genshin Impact video game has been leveraged by a cybercrime actor to disable antivirus programs to facilitate the deployment of ransomware, according to findings from Trend Micro. The ransomware infection, which was triggered in the last week of July 2022,...

SUSE: Security Advisory (SUSE-SU-2022:2996-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for gnutls (important)

openSUSE Security Update: Security update for gnutls Announcement ID: openSUSE-SU-2022:2882-1 Rating: important References: 1202020 Cross-References: CVE-2022-2509 CVSS scores: CVE-2022-2509 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2509 SUSE: 7.5...

Security update for python-M2Crypto (important)

openSUSE Security Update: Security update for python-M2Crypto Announcement ID: openSUSE-SU-2022:2562-1 Rating: important References: 1178829 Cross-References: CVE-2020-25657 CVSS scores: CVE-2020-25657 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-25657 SUSE: 7.5...

Security update for pcre (important)

openSUSE Security Update: Security update for pcre Announcement ID: openSUSE-SU-2022:2361-1 Rating: important References: 1199232 Cross-References: CVE-2022-1586 CVSS scores: CVE-2022-1586 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-1586 SUSE: 8.6...

Security update for libslirp (moderate)

openSUSE Security Update: Security update for libslirp Announcement ID: openSUSE-SU-2022:2941-1 Rating: moderate References: 1187365 1201551 Cross-References: CVE-2021-3593 CVSS scores: CVE-2021-3593 NVD : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2021-3593 SUSE: 3.8...

Security update for zlib (important)

openSUSE Security Update: Security update for zlib Announcement ID: openSUSE-SU-2022:2947-1 Rating: important References: 1202175 Cross-References: CVE-2022-37434 CVSS scores: CVE-2022-37434 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-37434 SUSE: 8.1...

Security update for openssl-1_1 (important)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2022:2328-1 Rating: important References: 1201099 Cross-References: CVE-2022-2097 CVSS scores: CVE-2022-2097 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-2097 SUSE: 7.5...

CVE-2022-26330

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

CVE-2022-26331

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

Cross site scripting

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

Cross site scripting

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

CVE-2022-26331 Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

CVE-2022-26331

CVE-2022-26331 affects Micro Focus ArcSight Logger. Vulnerable are ArcSight Logger versions prior to 7.2.2. The issue could be remotely exploited to cause Information Disclosure or Self Cross-Site Scripting (XSS). Root cause details are not specified in the provided documents. Remediation: upgrad...

CVE-2022-26330 Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure.

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

CVE-2022-26330

CVE-2022-26330 affects Micro Focus ArcSight Logger prior to version 7.2.2. The documented impact is information disclosure and self XSS, with remote exploitation described in multiple sources. The root cause details are not fully enumerated in the provided documents, but the vulnerability targets...

PT-2022-23940 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security versions 2021 through 2022 Description: The issue allows an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. It is an Out-Of-Bounds Read Information Disclosure...

PT-2022-23941 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security versions 2021 through 2022 Description: The issue is an Out-Of-Bounds Read Information Disclosure that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected...