Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

A Secure User Authentication Method – Planning is More Important than Ever

When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. Organizations cannot always be judged on those metrics alone. There is an increasing need to evaluate company ownership, policies and the stability, or...

The vulnerability of the HTTP(S) control module for operating systems HiOS with Belden Hirschmann network switches of the RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, and RED series, as well as the operating system HiSecOS with Belden Hirschmann network switches of the EAGLE20/30 series, allows a perpetrator to cause service interruptions.

The vulnerability of the HTTPS control module for operating systems HiOS and network switches from Belden Hirschmann, models RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, as well as the operating system HiSecOS for network switches from Belden Hirschmann, model EAGLE20/30, is related to th...

The vulnerabilities of the functions unix_sock_destructor() and unix_release_sock() in the BPF subsystem of Linux kernel allow a attacker to cause a service failure.

The vulnerabilities of the unixsockdestructor and unixreleasesock functions in the BPF subsystem of Linux kernels involve the use of memory after it has been freed. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

Citrix Cloud - Display messages to users in cloud workspace

Need to be able to customize messages when users log into cloud workspace to inform when of any maintenance or planned outages...

The vulnerability of the `cv::RBaseStream::readBlock` function in the `modules/imgcodecs/src/bitstrm.cpp` file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the cv::RBaseStream::readBlock function in the modules/imgcodecs/src/bitstrm.cpp file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to reading data beyond the allowed buffer limits. Exploiting this...

The vulnerability in the regexp_nfa.c component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the regexpnfa.c component in the text editor Vim is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the spell_iswordp() function in the spell.c component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the spelliswordp function in the spell.c component of the Vim text editor is related to the lack of checks for empty prewords. Exploiting this vulnerability allows a malicious user to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the `find_field_in_tables` and `find_order_in_list` components of the MariaDB database, which allows a hacker to cause service failures.

The vulnerability of the findfieldintables and findorderinlist components of the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

Multiple ransomware data leak sites experience DDoS attacks, facing intermittent outages and connectivity issues

By Azim Khodjibaev, Colin Grady, Paul Eubanks. Since Aug. 20, 2022, Cisco Talos has been monitoring suspected distributed denial-of-service DDoS attacks resulting in intermittent downtime and outages affecting several ransomware-as-a-service RaaS data leak sites. While the source and origin of th...

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to create, delete, or alter access to critical data, gain read-only access to data, or cause partial service disruption.

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to create, delete, or alter access to critical data, gain read-only access to data, or cause a...

Malicious Package

Overview @epc-apps/api-outages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

How to Combat the Biggest Security Risks Posed by Machine Identities

The rise of DevOps culture in enterprises has accelerated product delivery timelines. Automation undoubtedly has its advantages. However, containerization and the rise of cloud software development are exposing organizations to a sprawling new attack surface. Machine identities vastly outnumber...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s Optimizer component allows a hacker to cause service failures or gain access to read, modify, or delete data.

The vulnerability of the Oracle MySQL Server component of the database management system’s Optimizer is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures or gain read, modify, or delete privileges using the MySQL protocol...

The vulnerability of the streaming transmission parser, related to incorrect resource cleaning or release, allows a hacker to cause a service failure.

The vulnerability of the streaming transmission parser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the ap_rwrite() function in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the aprwrite function in the Apache HTTP Server is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the microprogramming software of Huawei CV81-WDM FW devices, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the microprogramming software in Huawei CV81-WDM FW multifunctional devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created malware package...

Enhance Network Resiliency with Contingency DDoS Protection

Recent digital market outages have proven the fragility of network infrastructure. When your primary service provider experiences an unexpected outage, your infrastructure is left unprotected and vulnerable to a DDoS attack. The downtime you face waiting for your DDoS mitigation to start working...

Malicious code in @epc-apps/api-outages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52303d5ff48784b5ed46373ac7162f5ddc5ed3c8c629c696ccacba4c15d8e587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-234 Malicious code in @epc-apps/api-outages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52303d5ff48784b5ed46373ac7162f5ddc5ed3c8c629c696ccacba4c15d8e587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...