1909 matches found
SUSE CVE-2023-40577
Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in...
Oracle MySQL Server 8.x <= 8.0.34, 8.1.0 Security Update (cpujan2024) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
OESA-2024-1050 netdata security update
netdata is the fastest way to visualize metrics. It is a resource efficient, highly optimized system for collecting and visualizing any type of realtime time-series data, from CPU usage, disk activity, SQL queries, API calls, web site visitors, etc. netdata tries to visualize the truth of now, in...
OESA-2024-1051 netdata security update
netdata is the fastest way to visualize metrics. It is a resource efficient, highly optimized system for collecting and visualizing any type of realtime time-series data, from CPU usage, disk activity, SQL queries, API calls, web site visitors, etc. netdata tries to visualize the truth of now, in...
CVE-2023-6129
creationtimestamp| type| source ---|---|--- 2024-01-09 18:26:50+00:00| seen| https://t.me/ctinow/165198 2024-01-10 06:41:07+00:00| seen| https://t.me/ctinow/165563 2024-01-19 12:33:19+00:00| seen| https://t.me/arpsyndicate/2926 2024-01-26 14:41:30+00:00| seen| https://t.me/ctinow/174251 2024-01-2...
CVE-2023-6867
creationtimestamp| type| source ---|---|--- 2024-01-04 07:51:58+00:00| seen| https://t.me/ctinow/162814 2024-01-12 21:17:19+00:00| seen| https://t.me/ctinow/167530...
Apple’s iPhone Hack Attack Warnings Spark Political Firestorm in India
By Waqas Big Tech vs. Big Brother: Apple Defies India Pressure over iPhone Hacking Alerts. This is a post from HackRead.com Read the original post: Apples iPhone Hack Attack Warnings Spark Political Firestorm in India...
CVE-2023-51772
creationtimestamp| type| source ---|---|--- 2023-12-25 07:27:05+00:00| seen| https://t.me/ctinow/159153 2024-01-19 07:11:36+00:00| seen| https://t.me/ctinow/170071...
Virtuozzo Hybrid Infrastructure 6.0 Update 1 (6.0.1-76)
In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover improvements in the compute service, object storage, alerts and monitoring. Additionally, this release delivers stability and security improvements, and addresses issues found in previous releases...
SUSE CVE-2023-6870
Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...
US pharmacy Rite Aid banned from operating facial recognition systems
Pharmacy chain Rite Aid has been denied the right to run facial recognition systems in its stores for five years, by a Federal Trade Commission FTC ruling. The regulator found so many flaws in the retailers surveillance program that it concluded Rite Aid had failed to implement reasonable...
A week in security (November 27 – December 3)
Last week on Malwarebytes Labs: Explained: Domain fronting Will ChatGPT write ransomware? Yes. Associated Press, ESPN, CBS among top sites serving fake virus alerts Meta sued over forcing users to pay to stop tracking Update now! Chrome fixes actively exploited zero-day vulnerability Many major...
Associated Press, ESPN, CBS among top sites serving fake virus alerts
ScamClub is a threat actor whos been involved in malvertising activities since 2018. Chances are you probably ran into one of their online scams on your mobile device. Confiant, the firm that has tracked ScamClub for years, released a comprehensive report in September while also disrupting their...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in nagaoka taxi. A remote attacker can exploit the vulnerability to send a malicious notification to the victim...
Hands on Review: LayerX's Enterprise Browser Security Extension
The browser has become the main work interface in modern enterprises. It's where employees create and interact with data, and how they access organizational and external SaaS and web apps. As a result, the browser is extensively targeted by adversaries. They seek to steal the data it stores and u...
CVE-2023-5570
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting.This issue affects Home Manager Gateway: before v.1.27.12...
zeek -- potential DoS vulnerabilities
Tim Wojtulewicz of Corelight reports: A specially-crafted SSL packet could cause Zeek to leak memory and potentially crash. A specially-crafted series of FTP packets could cause Zeek to log entries for requests that have already been completed, using resources unnecessarily and potentially causin...
CVE-2023-37679
creationtimestamp| type| source ---|---|--- 2023-10-26 20:16:00+00:00| seen| https://t.me/cibsecurity/72981 2023-12-11 01:22:38+00:00| seen| https://t.me/arpsyndicate/1685 2024-01-30 16:05:09+00:00| seen|...
Announcing NEW Malwarebytes Identity Theft Protection
We’ve always been committed to keeping you safe and secure online. But these days, cybersecurity isn’t just about defending you from malware; it’s about protecting your—and your family’s—entire digital identity. We know that people are worried. In fact, in our latest report, titled “Everyone’s...
Oracle MySQL Server 8.x <= 8.0.34 Security Update (cpuoct2023) - Linux
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...