kernel: Reserved fields in guest message responses may not be zero initialized

A flaw was found in some AMD CPUs where the guest message responses have not been zero-initialized. This issue may allow a local attacker with the ability to run arbitrary code on a container or virtual machine to discover sensitive information contained in the host system's memory...

Important: Red Hat Security Advisory: Advanced Virtualization 8.2.1z security update

The updated Advanced Virtualization module is now available for Red Hat Enterprise Linux 8.2.1 Advanced Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: virt:av and virt-devel:av security update

An update for the virt:av and virt-devel:av modules is now available for Advanced Virtualization for RHEL 8.4.0.EUS. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 8 : Advanced Virtualization 8.2.1z (RHSA-2024:4727)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4727 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat...

Security Bulletin: Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the issues. Vulnerability Details CVEID:CVE-2023-45288 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a memory exhaustion flaw due to floo...

Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking

--- The relationship between various TDSs and DNS associated with Vigorish Viper and the final landing experience for the user A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an advanced "technology suite" that runs the...

CVE-2024-38750

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digontoahsan Advanced post slider.This issue affects Advanced post slider: from n/a through 3.0.0...

CVE-2024-38750 WordPress Advanced post slider plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digontoahsan Advanced post slider.This issue affects Advanced post slider: from n/a through 3.0.0...

CVE-2024-38750 WordPress Advanced post slider plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digontoahsan Advanced post slider.This issue affects Advanced post slider: from n/a through 3.0.0...

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

Security Bulletin: Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the issues. Vulnerability Details CVEID:CVE-2023-4641 DESCRIPTION: shadow-maint shadow-utils could allow a local authenticated attacker to obtain sensitive...

Supportability- Remote Support on Android Devices with Samsung Knox

Remote Support on Android Devices are only supported with Samsung Knox. There are two types of remote support one can enable for a Samsung KNOX device: Basic Support: This allows us to view diagnostic information about the device,for examplesystem information, processes that are running, task...

Moderate: Red Hat Bug Fix Advisory: RHBA: Submariner 0.17.2 - bug fix and enhancement update

Submariner 0.17 packages that fix various bugs and add various enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.10 Submariner enables direct networking between pods and services on different Kubernetes clusters that are either on-premises or in...

WordPress Advanced post slider plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Advanced post slider versions = 3.0.0...

Malicious code in sap-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b44915bb9e2db1c39c412b6eafce4e28d360737be9e0a62b77d95c39f99f4c9e The OpenSSF Package Analysis project identified 'sap-advanced' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7517 Malicious code in sap-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b44915bb9e2db1c39c412b6eafce4e28d360737be9e0a62b77d95c39f99f4c9e The OpenSSF Package Analysis project identified 'sap-advanced' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

WordPress Advanced post slider Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Advanced post slider Type Plugin Vulnerable versions = 3.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38750 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID df5074d84975 Credits LVT-tholv2k Required privilege...

Low: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.4 security updates and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.10.4 General Availability release images, which apply security fixes and fix bugs. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

The Stark Truth Behind the Resurgence of Russia’s Fin7

The Russia-based cybercrime group dubbed "Fin7," known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 -- setting up thousands o...

Google Adds Passkeys to Advanced Protection Program for High-Risk Users

Google on Wednesday announced that it's making available passkeys for high-risk users to enroll in its Advanced Protection Program APP. "Users traditionally needed a physical security key for APP — now they can choose a passkey to secure their account," Shuvo Chatterjee, product lead of APP, said...