945 matches found
The vulnerability of OpenVPN software is related to issues with encryption using a 64-bit block. This allows a hacker to restore the original message.
The vulnerability of the OpenVPN software is related to issues with encryption when using a 64-bit block cipher. Exploiting this vulnerability allows a malicious actor to restore the original message through a “Sweet32” attack...
OPENSUSE-SU-2019:2558-1 Security update for apache2-mod_perl
This update for apache2-modperl to version 2.0.11 fixes the following issues: Security issue fixed: - CVE-2011-2767: Fixed a vulnerability which could have allowed perl code execution in the context of user account bsc1156944. Other issue addressed: - Restore process name after svsetpvmg call...
OPENSUSE-SU-2019:2549-1 Security update for apache2-mod_perl
This update for apache2-modperl to version 2.0.11 fixes the following issues: Security issue fixed: - CVE-2011-2767: Fixed a vulnerability which could have allowed perl code execution in the context of user account bsc1156944. Other issue addressed: - Restore process name after svsetpvmg call...
Louisiana State Government Hit by Ransomware Attack Forcing Server Shutdowns
Targeted ransomware attacks on banking and finance, government, healthcare, and critical infrastructure are on the rise, with the latest victim being the state government of Louisiana. The state government of Louisiana was hit by a large-scale coordinated ransomware attack yesterday, which forced...
The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis involves memory restoration of an unreliable data structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2019-18645
The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged directories...
Design/Logic Flaw
The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged directories...
Ransomware Hits B2B Payments Firm Billtrust
Business-to-business payments provider Billtrust is still recovering from a ransomware attack that began last week. The company said it is in the final stages of bringing all of its systems back online from backups. With more than 550 employees, Lawrence Township, N.J.-based Billtrust is a...
PT-2019-5300
Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0.0 through 2.9.10.1 FasterXML jackson-databind versions 2.6.0 through 2.6.7.3 FasterXML jackson-databind versions 2.7.0 through 2.7.9.6 FasterXML jackson-databind versions 2.8.0 through 2.8.11.4 Descripti...
Alabama Hospitals Pay Up in Ransomware Attack
An Alabama hospital system has paid its attackers in a ransomware attack that knocked its systems offline on Oct. 1. Officials at the DCH Health System didn’t say how much the hospitals paid for the decryption key, but noted that they have started a “methodical” process of system restoration. “We...
CB TAU Threat Intelligence Notification: Nemty Ransomware
While Nemty Ransomware is distributed by various exploit kits, its behavior is similar to other variants of ransomware. It will perform “task kill” on processes to ensure the encryption of files such as databases SQL server, perform the deletion of volume shadow copies, and disable Windows...
Ransomware Bites Dental Data Backup Firm
PerCSoft, a Wisconsin-based company that manages a remote data backup service relied upon by hundreds of dental offices across the country, is struggling to restore access to client systems after falling victim to a ransomware attack. West Allis, Wis.-based PerCSoft is a cloud management provider...
CVE-2019-4536
IBM i 7.4 users who have done a Restore User Profile RSTUSRPRF on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this...
CB TAU Threat Intelligence Notification: GermanWiper Ransomware
GermanWiper Ransomware was found distributed via spam email campaign in Germany. It’s a data-wiping malware and the ransom note was written in German language. The malware pretends to be ransomware but is actually a wiper that destroys the data instead of encrypting it. Figure 1: Screenshot of th...
Product update: Virtuozzo 6.0 Update 12 Hotfix 44 (6.0.12-3746)
The Hotfix 44 for Virtuozzo 6.0.12 fixes a security issue. Vulnerability id: PSBM-96909 Fixed possible corruption of VM configuration after restoration from backup by means of third-party solutions. The built-in backup restoration tool 'prlctl restore' is not affected. User data inside restored V...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
Design/Logic Flaw
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2017-18384
CVE-2017-18384 affects cPanel prior to version 68.0.15, where jailed accounts can restore files that lie outside of their jail confinement (SEC-310). The connected Red Hat and CVE records reiterate the same description without additional technical specifics on root cause or affected components be...