PT-2022-4910 · Talos · Talos

Name of the Vulnerable Software and Affected Versions: Talos versions prior to 1.2.2 Description: The issue is related to improper validation of the request while signing a worker node CSR, which might allow a Talos control plane node to issue a Talos API certificate with full access to the Talos...

ai.preferred:venom (>=4.0.1 <=4.2.7), ai.stainless:grails-tika (=0.1.0) +8766 more potentially affected by CVE-2022-36033 via org.jsoup:jsoup (>=0.2.2 <=1.15.2)

org.jsoup:jsoup MAVEN version =0.2.2, =4.0.1, =3.4.0, =3.4.0, =0.9.6, =0.9.6, =0.1.1, =0.5.0, =2021.9.1, =2023.1.1 and more Source cves: CVE-2022-36033 Source advisory: OSV:GHSA-GP7F-RWCX-9369...

handbook.spherestandards.org Cross Site Scripting vulnerability OBB-2881113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

urlaubsland-bayern.info Cross Site Scripting vulnerability OBB-2866968

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 35 Update: firefox-104.0-5.fc35

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 36 Update: dotnet3.1-3.1.422-1.fc36

.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...

[SECURITY] Fedora 36 Update: firefox-104.0-5.fc36

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Lean Security 101: 3 Tips for Building Your Framework

Cobalt, Lazarus, MageCart, Evil, Revil — cybercrime syndicates spring up so fast it's hard to keep track. Until…they infiltrate your system. But you know what's even more overwhelming than rampant cybercrime? Building your organization's security framework. CIS, NIST, PCI DSS, HIPAA, HITrust, and...

Fedora: Security Advisory for firefox (FEDORA-2022-4279e6c668)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NIST’s Post-Quantum Cryptography Standards

Quantum computing is a completely new paradigm for computers. A quantum computer uses quantum properties such as superposition, which allows a qubit a quantum bit to be neither 0 nor 1, but something much more complicated. In theory, such a computer can solve problems too complex for conventional...

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

...

Fedora: Security Advisory for firefox (FEDORA-2022-2c4dc61810)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: firefox-103.0-1.fc36

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Shift Left: Secure Your Innovation Pipeline

There’s no shortage of buzzwords in the tech world. Some are purely marketing spin. But others are colloquial ways for the industry to talk about complex topics that have a massive impact on how organizations and teams drive innovation and work more efficiently. Here at Rapid7, we believe the...

[SECURITY] Fedora 36 Update: golang-k8s-pod-security-admission-1.22.0-4.fc36

Kubernetes Pod Security Standards implementation...

Securing Open-Source Software

Good essay arguing that open-source software is a critical national-security asset and needs to be treated as such: Open source is at least as important to the economy, public services, and national security as proprietary code, but it lacks the same standards and safeguards. It bears the qualiti...

Discover 5 lessons Microsoft has learned about compliance management

Compliance management is a complex process—one that gets increasingly more complicated the larger an organization grows. Microsoft knows this firsthand, not only because of our experience providing Security and Compliance solutions to customers but also because of the global reach and...

dresdner-galaband.de Cross Site Scripting vulnerability OBB-2787105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 35 Update: golang-k8s-pod-security-admission-1.22.0-3.fc35

Kubernetes Pod Security Standards implementation...

[SECURITY] Fedora 35 Update: golang-gopkg-square-jose-2-2.6.0-3.fc35

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. This includes support for JSON Web Encryption, JSON Web Signature, and JSON Web Token standards...