13486 matches found
USN-6096-1: Linux kernel vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 Ziming Zhang discovered that the VMware Virtual GPU DR...
MichaelKors Ransomware Targets Linux and VMware ESXi Systems with Hypervisor Jackpotting
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MichaelKors ransomware, a new RaaS operation, has been targeting Linux and VMware ESXi systems since April 2023, utilizing the tactic of "hypervisor jackpotting" to gain unrestricted access and encrypt...
VMware Spring Boot < 2.5.15, 2.6.x < 2.6.15, 2.7.x < 2.7.12, 3.0.x < 3.0.7 DoS Vulnerability
VMware Spring Boot is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Ubuntu: Security Advisory (USN-6091-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-17682 Ā· Undefined Ā· Undefined
ŠŃŃŠ»ŠµŠ“Š¾Š²Š°ŃŠµŠ»Šø Š½Š°ŃŠøŠ½Š°ŃŃ ŃŠ°ŃŠŗŃŃŠ²Š°ŃŃ ŃŠµŠ·ŃŠ»ŃŃŠ°ŃŃ ŃŠ²Š¾ŠµŠ¹ ŃŠ°Š±Š¾ŃŃ, ŠŗŠ¾ŃŠ¾ŃŃŠµ Š“ŠµŠ¼Š¾Š½ŃŃŃŠøŃŠ¾Š²Š°Š»ŠøŃŃ Š² ŃŠ°Š¼ŠŗŠ°Ń Ń Š°ŠŗŠµŃŃŠŗŠ¾Š³Š¾ ŃŃŃŠ½ŠøŃŠ° Pwn2Own, ŠæŃŠ¾Š²ŠµŠ“ŠµŠ½Š½Š¾Š³Š¾ ZDI Š² Š“ŠµŠŗŠ°Š±ŃŠµ ŠæŃŠ¾ŃŠ»Š¾Š³Š¾ Š³Š¾Š“Š°. ŠŠµ Š¾ŃŃŃŠ°ŃŃ Šø ŠæŠ¾ŃŃŠ°Š²ŃŠøŠŗŠø, ŠæŃŠ°Š²Š“Š° Š½Šµ Š²ŃŠµ. ŠŃŃŠ»ŠµŠ“Š¾Š²Š°ŃŠµŠ»Ń ŠŠ³ŃŠµŠ½ Š„Š¾Š°Š½Š³ Š¢Ń Š¾Ń ŠøŠ· STAR Labs Š¾ŠæŃŠ±Š»ŠøŠŗŠ¾Š²Š°Š» ŠæŠ¾Š“ŃŠ¾Š±Š½Š¾ŃŃŠø Š“Š²ŃŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠµŠ¹ Š² VMWare...
USN-6091-1: Linux kernel vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 Ziming Zhang discovered that the VMware Virtual GPU DR...
VMware vRealize Operations Multiple Vulnerabilities (VMSA-2023-0009)
The version of VMware vRealize Operations vROps running on the remote host is missing a vendor supplied patch. It is, therefore, affected by multiple vulnerabilities: - VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges c...
Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Spring Security
Summary Multiple vulnerabilities in Spring Security used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-22976 DESCRIPTION: Spring Security could provide weaker than expected security, caused by an integer overflow vulnerability which results in a lack of sal...
Oracle Linux 9 : qemu-kvm (ELSA-2023-12328)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12328 advisory. - A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge...
USN-6079-1: Linux kernel vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 Ziming Zhang discovered that the VMware Virtual GPU DR...
USN-6079-1 linux, linux-aws, linux-azure, linux-azure-5.19, linux-kvm, linux-lowlatency, linux-raspi vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 Ziming Zhang discovered that the VMware Virtual GPU DR...
Inside Qilin Ransomware: Affiliates Take Home 85% of Ransom Payouts
Ransomware affiliates associated with the Qilin ransomware-as-a-service RaaS scheme earn anywhere between 80% to 85% of each ransom payment, according to new findings from Group-IB. The cybersecurity firm said it was able to infiltrate the group in March 2023, uncovering details about the...
New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems
A new ransomware-as-service RaaS operation called MichaelKors has become the latest file-encrypting malware to target Linux and VMware ESXi systems as of April 2023. The development points to cybercriminal actors increasingly setting their eyes on the ESXi, cybersecurity firm CrowdStrike said in ...
New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems
A new ransomware-as-service RaaS operation called MichaelKors has become the latest file-encrypting malware to target Linux and VMware ESXi systems as of April 2023. The development points to cybercriminal actors increasingly setting their eyes on the ESXi, cybersecurity firm CrowdStrike said in ...
CVE-2023-20880
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'...
CVE-2023-20879
VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application can gain root access to the underlying operating system...
CVE-2023-20877
VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution leading to privilege escalation...
CVE-2023-20878
VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...