70 matches found
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2519)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bpf, skmsg: Fix NULL pointer dereference in skpsockskbingressenqueueCVE-2024-36938 bpf, sockmap: Prevent lock inversion deadlock in map delete...
Telegram Agrees to Share User Data With Authorities for Criminal Investigations
In a major policy reversal, the popular messaging app Telegram has announced it will give users' IP addresses and phone numbers to authorities in response to valid legal requests in an attempt to rein in criminal activity on the platform. "We've made it clear that the IP addresses and phone numbe...
SUSE CVE-2024-26938
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intelbiosencodersupportsdpdualmode If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of oopsing just bail early. We...
CVE-2024-26784 pmdomain: arm: Fix NULL dereference on scmi_perf_domain removal
In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmiperfdomain removal On unloading of the scmiperfdomain module got the below splat, when in the DT provided to the system under test the 'power-domain-cells' property was missing. Indeed,...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin = 1.2.8 versions...
CLSA-2022-1671033543 vim: Fix of CVE-2022-4292
CVE-2022-4292: bail out if the window no longer exists...
Twitter Hacker Arrested
A 17-year-old Florida boy was arrested and charged with last week's Twitter hack. News articles. Boing Boing post. Florida state attorney press release. This is a developing story. Post any additional news in the comments. EDITED TO ADD 8/1: Two others have been charged as well. EDITED TO ADD 8/1...
WikiLeaks' Julian Assange Sentenced to 50 Weeks in UK Jail
WikiLeaks founder Julian Assange has been sentenced to 50 weeks—for almost a year—in prison by a London court for breaching his bail conditions in 2012 and taking refuge in the Ecuadorian embassy for nearly 7 years. The 47-year-old Assange was arrested last month by London's Metropolitan Police...
WikiLeaks' Julian Assange Sentenced to 50 Weeks in UK Jail
WikiLeaks founder Julian Assange has been sentenced to 50 weeks—for almost a year—in prison by a London court for breaching his bail conditions in 2012 and taking refuge in the Ecuadorian embassy for nearly 7 years. The 47-year-old Assange was arrested last month by London's Metropolitan Police...
local.com XSS vulnerability
Open Bug Bounty ID: OBB-312205 Description| Value ---|--- Affected Website:| local.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WannaCry hero gets bail; pleading not guilty over Kronos malware
By Waqas As you might know, 23-year-old Marcus Hutchins @MalwareTechBlog on Twitter This is a post from HackRead.com Read the original post: WannaCry hero gets bail; pleading not guilty over Kronos malware...
Marcus Hutchins (MalwareTech) Gets $30,000 Bail, But Can't Leave United States
Marcus Hutchins, the malware analyst who helped stop global Wannacry menace, has reportedly pleaded not guilty to charges of creating and distributing the infamous Kronos banking malware and is set to release on $30,000 bail on Monday. Hutchins, the 23-year-old who operates under the alias...
Kim Dotcom loses Fight Against Extradition to the US
Internet millionaire and Megaupload founder Kim Dotcom and his three associates are eligible for extradition to the US to face criminal charges over massive copyright infringement on Megaupload now-shuttered, the court has ruled citing "overwhelming" evidence. On Tuesday afternoon, New Zealand...
CVE-2014-7803
The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7734
The Reds Anytime Bail aka com.onesolutionapps.redsanytimebailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7734
The Reds Anytime Bail aka com.onesolutionapps.redsanytimebailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The AAAA Discount Bail aka com.onesolutionapps.aaaadiscountbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7734
The CVE-2014-7734 entry concerns the Android app Reds Anytime Bail (com.onesolutionapps.redsanytimebailandroid) version 1.1, which does not verify X.509 certificates from SSL servers. This weakens TLS/SSL, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...
CVE-2014-7803
CVE-2014-7803 affects the Android app Woodward Bail (com.onesolutionapps.woodwardbailandroid), version 1.1, where TLS X.509 certificate validation is not performed. This enables MITM attackers to spoof SSL servers and exfiltrate sensitive data via a crafted certificate (base CVSS v2 score 5.4).