North Korean Hackers Targeting Small and Midsize Businesses with H0lyGh0st Ransomware

An emerging threat cluster originating from North Korea has been linked to developing and using ransomware in cyberattacks targeting small businesses since September 2021. The group, which calls itself H0lyGh0st after the ransomware payload of the same name, is being tracked by the Microsoft Thre...

GHSA-HQ2H-9MC3-H6W2 Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name

Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job’s display name shown as part of a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Pipeline Maven Integration Plugin 3.9.3 escap...

Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name

Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job’s display name shown as part of a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Pipeline Maven Integration Plugin 3.9.3 escap...

mysql: Server: DML unspecified vulnerability (CPU Apr 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

Dell EMC CloudLink 安全漏洞

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private, and hybrid cloud environments.Dell EMC CloudLink 7.1 and earlier versions are vulnerable to a buffer overflow vulnerability that could be exploited by a local, low-privilege attack...

isula-build 安全漏洞

isula-build is an open source iSula Container Team Container image build tool from iSula Container Team that supports fast container image building via Dockerfile files. Isula-build A security vulnerability exists in Isula-build prior to 0.9.5-8 When building container images, some functions used...

The vulnerability of the Windows Console Driver component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Console Driver component in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Cloud Misconfigurations : Avoid Breaches

Check out this infographic on cloud misconfigurations to gain insight on the major causes of misconfigurations, the impacts of those misconfigurations, and tips on how to avoid them so you can continue to build confidently in the cloud...

IBM MQ Appliance Buffer Overflow Vulnerability (CNVD-2021-03003)

The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM USA. The IBM MQ Appliance suffers from a buffer overflow vulnerability that can be exploited by a remote attacker who can send a specially designed SNMP query to cause the...

Hancom Office 2020 suffers from a memory corruption vulnerability (CNVD-2020-62415)

Hancom Office 2020 offers a feature-rich set of desktop productivity applications for performing common tasks such as word processing, spreadsheet modeling, graphical representation, and working with PDFs. A memory corruption vulnerability exists in Hancom Office 2020, which can be exploited by a...

Hancom Office 2020 suffers from a memory corruption vulnerability (CNVD-2020-62416)

Hancom Office 2020 offers a feature-rich set of desktop productivity applications for performing common tasks such as word processing, spreadsheet modeling, graphical representation, and working with PDFs. A memory corruption vulnerability exists in Hancom Office 2020, which can be exploited by a...

UBUNTU-CVE-2020-14861

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-6350

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Memory Corruption Vulnerability in WPS Office Campus Edition (CNVD-2020-53352)

WPS Office Campus is a lifetime free office software for teachers and students. A memory corruption vulnerability exists in WPS Office Campus Edition. An attacker can exploit this vulnerability to cause the program to crash...

Memory corruption vulnerability exists in WPS Office (CNVD-2020-23730)

WPS Office is a Kingsoft office software produced by the office software, you can realize the office software commonly used text, forms, presentations and other functions. WPS Office memory corruption vulnerability, attackers can use the vulnerability to cause the program to crash, may obtain...

DEBIAN-CVE-2019-20007

An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxmlstr2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer in some compilers. After this, the function ezxmlparsestr does not check whether the s variable is...

All You Need To Know For External Hard Drive Recovery

By Uzair Amir Prevention is better than cure, so before getting started with discussing the methods for external hard drive recovery, it is better first to address the causes and things you need to avoid before starting the recovery process. This is a post from HackRead.com Read the original post...

EUVD-2019-2135

HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client...

PT-2019-18205 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.0.0.4 F5 BIG-IP versions 14.1.0 through 14.1.0.5 Description: Undisclosed traffic sent to the BIG-IP iSession virtual...

GHSA-86P3-4GFQ-38F2 Denial of Service in url-relative

All versions of url-relative are vulnerable to Denial of Service. If the values to and from are equal, the function hangs and never returns. This may cause a Denial of Service. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available...