CVE-2022-34444

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak...

CVE-2022-34444

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x, have an information disclosure vulnerability that could allow data leakage via a remote unauthenticated attacker. The available documentation attributes the issue to an information vulnerability and recommends upgrading to a version contain...

CVE-2022-34444

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak...

PT-2023-13404 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.2.0.x through 9.4.0.x Description: The issue is an information vulnerability that could be exploited by a remote unauthenticated attacker to cause a data leak. Recommendations: For Dell PowerScale OneFS versio...

Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5865-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5865-1 advisory. It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2 V4L2 implementation in the Linux kernel. A local attacker...

Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple issues due to IBM MQ.

Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities in IBM MQ packaged with the product. Vulnerability Details CVEID:CVE-2020-4375 DESCRIPTION: IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service...

HackerOne: Scope information is leaked when visiting policy scopes tab of any External Program

Scope information was leaked when visiting the policy scopes tab of any external program on HackerOne, allowing unauthorized users to view private program details. The vulnerability was caused by the new scope policy feature that displayed all program names and scopes using the new functionality...

KrebsOnSecurity in Upcoming Hulu Series on Ashley Madison Breach

KrebsOnSecurity will likely have a decent amount of screen time in an upcoming Hulu documentary series about the 2015 megabreach at marital infidelity site Ashley Madison. While I cant predict what the producers will do with the video interviews we shot, its fair to say the series will explore...

Anonymous Leaks 128 GB of Data from Russian ISP Convex

By Waqas The leaked data apparently belongs to Convex, the leading Russian internet provider. This is a post from HackRead.com Read the original post: Anonymous Leaks 128 GB of Data from Russian ISP Convex...

India’s Largest Truck Brokerage Company Leaking 140GB of Data

By Waqas The cause of the data leak is an ongoing server misconfiguration, identified by researchers on Shodan, the search engine for IoT devices. This is a post from HackRead.com Read the original post: Indias Largest Truck Brokerage Company Leaking 140GB of Data...

Authorization

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

PT-2023-1658 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw was found in the Linux Kernel, where the tls is tx ready function incorrectly checks for list emptiness. This can potentially lead to accessing a type-confused entry to the list...

Ubuntu: Security Advisory (USN-4869-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4835-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

A week in security (January 16—22)

Last week on Malwarebytes Labs: Google to support the use of Rust in Chromium Law enforcement app SweepWizard leaks data on crime suspects Accountant ordered to pay ex-employer after bossware shows "time theft" TikTok dances to the tune of $5.4m cookie fine "Untraceable" surveillance firm sued fo...

RHEL 8 : Red Hat OpenStack 16.1.9 (openstack-tripleo-heat-templates) (RHSA-2022:8796)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8796 advisory. Heat templates for TripleO Security Fixes: data leak of internal URL through keystoneauthtoken CVE-2021-4180 Other fixes: Before this update, NTP...

Vulnerability of the SM_io parser function: Decorator_.::read_vertex(), set_face() in the component Nef_S2/SM_io parser.h, part of the Computational Geometry Algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMio parser function in the NefS2/SMioparser.h component, belonging to the Computational Geometry Algorithms library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_prev() In the component Nef_2/PM_io parser.h, it is part of the CGAL computational geometry library. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s source file Nef2/PMioparser.h is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures throu...

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->sfaces_begin(); component Nef_S2/SNC_io parser.h; algorithms library from the Computational Geometry Library CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: ::readvertex vh-sfacesbegin in the NefS2/SNCio parser.h file. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

University suffers leaks, shutdowns at the hands of Vice Society

The Vice Society ransomware gang is back and making some unfortunate waves in the education sector. According to Bleeping Computer, the Society has held their ransomware laden hands up and admitted an attack on the University of Duisberg-Essen. Sadly this isnt the Universitys first encounter with...