Helping Our Customers Develop a Sustainability Strategy

...

[SECURITY] Fedora 41 Update: workrave-1.11.0~rc.1-1.fc41

Workrave is a program that assists in the recovery and prevention of Repetitive Strain Injury RSI. The program frequently alerts you to take micro-pauses, rest breaks and restricts you to your daily limit...

CVE-2024-52611

The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions...

KB5052423: Servicing stack update for Windows 10: February 11, 2025

None None...

CVE-2021-35033

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the...

CVE-2024-24842

Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Documentation, FAQs with AI Assistance.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through 11.30.2...

CVE-2024-20401

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service [CVE-2024-53981]

Summary python-multipart is used by IBM App Connect Enterprise Certified Container for parsing messages sent to the mapping assistance component. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service. This bulleti...

Malicious code in seller-assistance-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e5c57c936ac6211ed5848aa66442e47c82ea28997ce077d9947e86226f6d528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10792 Malicious code in seller-assistance-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e5c57c936ac6211ed5848aa66442e47c82ea28997ce077d9947e86226f6d528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-assistance-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9fbd59242e61985b8479eb67bfe945856c24c296a5130f77e8b28ae2631db7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10791 Malicious code in seller-assistance-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9fbd59242e61985b8479eb67bfe945856c24c296a5130f77e8b28ae2631db7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Repository upgrade error: "Some of the data in this repository is incompatible with the immutability settings."

Solution Requires Data Deletion The resolution procedure of this article involves the directed deletion of backup data that should not have been migrated to the immutable repository. Please review all details of the article closely, and contact Veeam Support if you would like assistance. Challeng...

Australia Threatens to Force Companies to Break Encryption

In 2018, Australia passed the Assistance and Access Act, which--among other things--gave the government the power to force companies to break their own encryption. The Assistance and Access Act includes key components that outline investigatory powers between government and industry. These...

VDA 2402 LTSR Features are not shown as installed when you attempt to change the VDA installation

You may not see the below features selected or installed after you attempt to change or modify the VDA installation from Control panel Use Windows Remote Assistance Use Real-Time Audio Transport Use Screen Sharing Is this VDA installed on VM in the Cloud...

Malicious code in assistance-finder-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736cb085b408315e3153f05af689db208cc6cd59cda88238c550b56a34e55a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How to Identify Your Citrix Cloud ID

In this article we will show how to identify the Citrix Cloud ID of the tenant you are currently working on. This ID is important to have when engaging with Citrix Support to ensure engagement on the environment you need assistance with. This is especially critical for customers with multiple...

Telerik Report Server Authentication Bypass / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule 'Telerik Report Server Auth Bypass and Deserialization RCE', 'Description' = %q This module chains an authentication bypass...

About the security content of watchOS 10.5

About the security content of watchOS 10.5 This document describes the security content of watchOS 10.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

HTTPS configuration between Brocade SANnav Management Portal and Brocade SAN switches (no CVE)

A security researcher reported a lack of encryption in Brocade SANnav for management protocol HTTP. The researcher states: By default, the appliance can be installed with these options: To configure HTTP or HTTPS connections between SANnav Management Portal and SAN switches, select one of the...