The vulnerability of the `find_field_in_tables` and `find_order_in_list` components of the MariaDB database, which allows a hacker to cause service failures.

The vulnerability of the findfieldintables and findorderinlist components of the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

Multiple ransomware data leak sites experience DDoS attacks, facing intermittent outages and connectivity issues

By Azim Khodjibaev, Colin Grady, Paul Eubanks. Since Aug. 20, 2022, Cisco Talos has been monitoring suspected distributed denial-of-service DDoS attacks resulting in intermittent downtime and outages affecting several ransomware-as-a-service RaaS data leak sites. While the source and origin of th...

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to create, delete, or alter access to critical data, gain read-only access to data, or cause partial service disruption.

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to create, delete, or alter access to critical data, gain read-only access to data, or cause a...

Malicious Package

Overview @epc-apps/api-outages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

How to Combat the Biggest Security Risks Posed by Machine Identities

The rise of DevOps culture in enterprises has accelerated product delivery timelines. Automation undoubtedly has its advantages. However, containerization and the rise of cloud software development are exposing organizations to a sprawling new attack surface. Machine identities vastly outnumber...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s Optimizer component allows a hacker to cause service failures or gain access to read, modify, or delete data.

The vulnerability of the Oracle MySQL Server component of the database management system’s Optimizer is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures or gain read, modify, or delete privileges using the MySQL protocol...

The vulnerability of the streaming transmission parser, related to incorrect resource cleaning or release, allows a hacker to cause a service failure.

The vulnerability of the streaming transmission parser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the ap_rwrite() function in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the aprwrite function in the Apache HTTP Server is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the microprogramming software of Huawei CV81-WDM FW devices, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the microprogramming software in Huawei CV81-WDM FW multifunctional devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created malware package...

Enhance Network Resiliency with Contingency DDoS Protection

Recent digital market outages have proven the fragility of network infrastructure. When your primary service provider experiences an unexpected outage, your infrastructure is left unprotected and vulnerable to a DDoS attack. The downtime you face waiting for your DDoS mitigation to start working...

Malicious code in @epc-apps/api-outages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52303d5ff48784b5ed46373ac7162f5ddc5ed3c8c629c696ccacba4c15d8e587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-234 Malicious code in @epc-apps/api-outages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52303d5ff48784b5ed46373ac7162f5ddc5ed3c8c629c696ccacba4c15d8e587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to cause service failures or unexpected shutdowns.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or forced shutdowns through network packets...

Multicloud, Multi-CDNs (Content Delivery Networks) Architecture – A Deceptive Future of the Internet

The last two years stood witness to multiple internet outages that caused massive disruptions across the globe. One prevalent theory is that multicloud, multi-CDNs content delivery networks are the inevitable future of the internet. This article conducts a litmus test on this theory and tries to...

The vulnerability of the CGI interpreter component for the PHP programming language allows attackers to disclose protected information, compromise data integrity, or cause service failures.

The vulnerability of the cgi component sapi/cgi/cgimain.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information, compromise data integrity, or cause service failures...

The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P router software allows a hacker to cause service interruptions.

The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P microprogrammed software routers lies in the absence of restrictions on file loading. Exploiting this vulnerability can allow a malicious actor to cause service failures by loading arbitrary files onto...

The vulnerability of the decode_chars function in the ASS/SSA Libass subtitle renderer allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decodechars function in the ASS/SSA Libass subtitle renderer is related to the use of an incorrect integer data type for subtraction operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Libraries component of the Oracle Java SE software platform, the Oracle GraalVM Enterprise Edition virtual machine, and the Oracle Solaris operating system allows a perpetrator to cause partial service interruptions.

The vulnerability of the Libraries component of the Oracle Java SE software platform, the Oracle GraalVM Enterprise Edition virtual machine, and the Oracle Solaris operating system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a partial servic...

The vulnerability of the QuickOpen::ReadRaw function in the UnRAR file decompression tool allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QuickOpen::ReadRaw function in the UnRAR decompression tool is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to improper authentication. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...