Using Valgrind on Chrome

Brief script that demonstrates running valgrind and afl-fuzz on Google Chrome. This favorite code for security auditing and memory leak detection with Valgrind runs the Valgrind tool and several other tools to check for memory leaks, which can lead to resource buffer overflows and more. Exploit /...

MAL-2025-1371 Malicious code in orange-meets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37037d337633f63999cc9026f347d4542faaf8a86bc78184e98a7031c17cfbe3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qualys Adds Threat Intelligence for Typosquatting and Defamatory Domains to External Attack Surface Management

Cybersecurity professionals can now use Qualys CyberSecurity Asset Management CSAM with External Attack Surface Management EASM to reduce cyber risks from credential harvesting, phishing, and malware downloads and diminish reputational harm. Bad actors have been registering look-alike, sound-alik...

Mageia: Security Advisory (MGASA-2025-0052)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2025-0053)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2025-0050)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6846-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-1216

creationtimestamp| type| source ---|---|--- 2025-02-12 19:09:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113992490126401949 2025-02-12 19:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv44coxn2a 2025-02-12 22:45:27+00:00| seen|...

Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activit...

CVE-2025-1244

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

CVE-2023-7241

creationtimestamp| type| source ---|---|--- 2025-02-12 15:10:09+00:00| seen| https://bsky.app/profile/neodyme.io/post/3lhyhf44inc2b...

CVE-2024-23563

creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeeqhynb2z 2025-02-14 10:05:07+00:00| seen| Telegram/TFFqSfT26ZOJtpMQorftKfykRnf9I0bnr-COpikamZRlN54i...

GitLab 13.3 < 17.6.5 / 17.7 < 17.7.4 / 17.8 < 17.8.2 (CVE-2025-0376)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via ...

Microsoft Office 2016 RCE Vulnerability (KB5002684)

This host is missing an important security update according to Microsoft KB5002684 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5051989)

This host is missing an important security update according to Microsoft KB5051989 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 2016 RCE Vulnerability (KB5002686)

This host is missing an important security update according to Microsoft KB5002686 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

SUSE: Security Advisory (SUSE-SU-2025:0434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-54916

creationtimestamp| type| source ---|---|--- 2025-02-11 23:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2shj2s2g 2025-02-12 01:09:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3959 2025-02-12 01:46:35+00:00| seen|...

CVE-2023-31343

creationtimestamp| type| source ---|---|--- 2025-02-11 22:40:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113987656887022195 2025-02-11 23:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2fxn4t2c 2025-02-12 01:11:15+00:00| seen|...

SUSE-SU-2025:0434-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705...