New Spam Attack Abusing OAuth Apps to Target Microsoft Exchange Servers

By Deeba Ahmed According to Microsoft 365 Defender Research Team, in an incident they analyzed, malicious OAuth applications were deployed on compromised cloud tenants, and eventually, attackers took over Exchange servers to carry out spam campaigns. This is a post from HackRead.com Read the...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-66020)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. Adobe Experience Manager is...

Adobe InDesign product buffer overflow vulnerability

Adobe InDesign, a set of typesetting and editing applications from Adobe, has a buffer overflow vulnerability that originates from out-of-bounds reads and could lead to a memory leak. An attacker can remotely execute arbitrary code through this vulnerability...

Malicious OAuth applications abuse cloud email services to spread spam

Microsoft researchers recently investigated an attack where malicious OAuth applications were deployed on compromised cloud tenants and then used to control Exchange Online settings and spread spam. The investigation revealed that the threat actor launched credential stuffing attacks against...

nss bug fix and enhancement update

An update is available for nss. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2022-79412)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

SUSE SLES15: flatpak / flatpak-devel / flatpak-zsh-completion / libflatpak0 / etc (SUSE-SU-2022:3284-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3284-1 advisory. - CVE-2021-41133: Fixed sandbox bypass via recent syscalls bsc1191507. - CVE-2021-43860: Fixed metadata validation bsc1194610...

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79417)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2022-79425)

Adobe InDesign is a set of typesetting and editing applications from Adobe, which is vulnerable to heap buffer overflow and can be used by attackers to execute arbitrary code...

PT-2022-6522 · Unknown · Wlan Module

Name of the Vulnerable Software and Affected Versions: WLAN module affected versions not specified Description: The issue is related to a vulnerability in permission verification within the WLAN module. This vulnerability can be exploited by third-party apps to affect WLAN functions. The problem ...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-87163)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. Adobe Experience Manager has a cross-site scripting vulnerability that could be exploited by attackers to steal a victim's cookie-based authentication...

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79418)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2022-79415)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79421)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79420)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

Fedora: Security Advisory for python3.8 (FEDORA-2022-66b65beccb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.1.5 (6598349)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 6598349 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported...

Critical: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5.2 security fixes and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.5.2 General Availability release images, which fix security issues and bugs. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

[SECURITY] Fedora 37 Update: rubygem-puma-5.6.5-1.fc37

Puma is a simple, fast, threaded, and highly parallel HTTP 1.1 server for Ruby/Rack applications. Puma is intended for use in both development and production environments. It's great for highly parallel Ruby implementations such as Rubinius and JRuby as well as as providing process worker support...

CVE-2022-36100

XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Starting with version 1.7 in XWiki Platform Applications Tag and prior to 13.10.6 and 14.4 in XWiki Platform Tag UI, the tags document Main.Tags in XWiki didn't sanitize user inputs...