New Biometrics

This article discusses new types of biometrics under development, including gait, scent, heartbeat, microbiome, and butt shape no, really...

[SECURITY] Fedora 30 Update: nbdkit-1.12.7-1.fc30

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

[SECURITY] Fedora 29 Update: libgcrypt-1.8.5-1.fc29

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

macOS 18.7.0 Kernel - Local Privilege Escalation

macOS 18.7.0 Kernel - Local Privilege Escalation macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild...

[SECURITY] Fedora 31 Update: libgcrypt-1.8.5-1.fc31

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

openSUSE Security Update : python-Werkzeug (openSUSE-2019-2145)

This update for python-Werkzeug fixes the following issues : Security issue fixed : - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Networ...

3S-Smart Software Solutions CODESYS Development System Cross-Site Scripting Vulnerability

3S-Smart Software Solutions CODESYS Development System is a set of programming tools for the field of industrial controllers and automation technology from 3S-Smart Software Solutions, Germany. A cross-site scripting vulnerability exists in 3S-Smart Software Solutions CODESYS Development System V...

Siemens Mendix Code Issue Vulnerability

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment and iteration. A code issue vulnerability exists in Siemens Mendix versions 7.23.5 and earlier. The vulnerability arises from an improperly designed or...

[SECURITY] Fedora 30 Update: libgcrypt-1.8.5-1.fc30

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

Facebook, Microsoft Challenge Industry to Detect, Prevent ‘Deepfakes’

Facebook, Microsoft and a number of universities have joined forces to sponsor a contest promoting research and development to combat deepfakes, or videos altered through artificial intelligence AI to mislead viewers. The two tech giants—along with the Partnership on AI and academics from Cornell...

SUSE-SU-2019:2308-1 Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383...

Bitdefender Antivirus Free Code Issue Vulnerability

Bitdefender Antivirus Free is a free version of the Romanian company Bitdefender's suite of antivirus programs that provide mainly cyber threat detection and ransomware protection. Bitdefender Antivirus Free is vulnerable to a code issue. The vulnerability arises from an improperly designed or...

WordPress formidable plugin code issue vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. formidable is a form builder used in it. A code issue vulnerability exists in the WordPress formidable plugin prior to version 4.02.01...

GitLab Code Issue Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A code issue vulnerability exists in GitLab Enterprise an...

Definitive Dossier of Devilish Debug Details – Part One: PDB Paths and Malware

Have you ever wondered what goes through the mind of a malware author? How they build their tools? How they organize their development projects? What kind of computers and software they use? We took a stab and answering some of those questions by exploring malware debug information. We find that...

Objective Development Software Little Snitch privileged helper tool privilege vulnerability

Objective Development Software Little Snitch is a host-based firewall for macOS applications from Objective Development Software, Austria. privateged helper tool is one of the helper tools. A privileged helper tool vulnerability in Objective Development Software Little Snitch versions 4.3.0 throu...

Fedora Update for edk2 FEDORA-2019-d47a9d4b8b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: edk2-20190501stable-2.fc30

EDK II is a development code base for creating UEFI drivers, applications and firmware images...

CVE-2019-9012

An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.2...

Atlassian Crowd 2.1.x < 3.0.5 RCE Vulnerability

According to its self-reported version number, the Atlassian Crowd application running on the remote host is 2.1.x prior to 3.0.5, 3.1.x prior to 3.1.6, 3.2.x prior to 3.2.8, 3.3.x prior to 3.3.5 or 3.4.x prior to 3.4.4. It is, therefore, affected by a remote code execution RCE vulnerability. An...