SPIKEDWINE Ploy to Infiltrate EU Diplomatic Circles

Summary: The SPIKEDWINE threat actor has been identified orchestrating a sophisticated cyber operation targeting European Union diplomats with a deceptive wine-tasting event. Its primary goal is to disrupt geopolitical relations between India and Europe through the deployment of a modular backdoo...

Commend WS203VICM Parameter Injection Vulnerability

The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. The Commend WS203VICM suffers from a parameter injection vulnerability that originates from a vulnerability that allows an unauthenticated, remote attacker to send a crafted message to the web serv...

mosquitto: memory leak leads to unresponsive broker

A memory leak vulnerability was found in Eclipse Mosquitto. This issue is triggered by malicious initial packets or certain client actions and may allow a remote attacker to the deplete system resources causing memory exhaustion, leading to a disruption in services and a denial of service conditi...

The vulnerability of the pci_dev_for_each_resource() function in the Linux operating system’s PCI kernel component allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the pcidevforeachresource function in the Linux operating system’s PCI core component is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause...

The vulnerability of the `format_fractional_part_nsecs` function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the formatfractionalpartnsecs function in the Wireshark network traffic analyzer is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Race condition

In Srelay the SOCKS proxy and Relay v.0.4.8p3, a specially crafted network payload can trigger a denial of service condition and disrupt the service...

edk2: Buffer overflow in the DHCPv6 client via a long Server ID option

A security flaw was identified in EDK2, the open-source reference implementation of the UEFI specification, involving a buffer overflow vulnerability. This particular weakness enables an unauthorized attacker within the vicinity of the network to transmit a specifically crafted DHCPv6 message...

The vulnerability of the dissect_bgp_open() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectbgpopen function in the Wireshark network traffic analyzer is related to the operation that occurs outside the buffer in memory when processing extended BGP parameter formats. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ubi_attach() function in the UBI driver for Linux operating systems allows a hacker to cause a service failure or exert other effects.

The vulnerability of the ubiattach function in the UBI Unsorted Block Images driver for the Linux operating system is related to a memory leak caused by the lack of releasing the kobj-name variable in the drivers/mtd/ubi/attach.c file. Exploiting this vulnerability can allow an attacker to cause ...

AT&T Outage Disrupts Service for Millions of Users Across US

By Waqas You are not alone, an AT&T outage is happening across the United States, and the company is working… This is a post from HackRead.com Read the original post: AT&T Outage Disrupts Service for Millions of Users Across US...

CVE-2024-1104

An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users...

PT-2024-16722 · Areal Topkapi · Webserv2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users. Recommendations: At the...

The vulnerability of the XML syntax analyzer library libexpat, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the XML syntax analyzer library libexpat is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability in the `src/video/SDL_pixels.c` component of the Simple DirectMedia Layer library allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the src/video/SDLpixels.c file of the Simple DirectMedia Layer library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures due to the...

The vulnerability of the lookup_sequence function in the ZBar barcode reading library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the lookupsequence function in the ZBar barcode reading library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures using a...

Law enforcement trolls LockBit, reveals massive takedown

In an act of exquisite trolling, the UKs National Crime Agency NCA has announced further details about its disruption of the LockBit ransomware group by using the groups own dark web website. The LockBit dark web site has a new look Since the demise of Conti in 2022, LockBit has been unchallenged...

Ubiquiti UniFi Switches Security Vulnerability

Ubiquiti UniFi Switches is a series of switches from Ubiquiti USA. A security vulnerability exists in Ubiquiti UniFi Switches versions prior to 6.6.61, which stems from the fact that an attacker with network access privileges may be able to disrupt device management and discovery functionality by...

The vulnerability of the CODEOWNERS component of the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.

The vulnerability of the CODEOWNERS component in the git-based software development platform for collaborative code management on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

How to Not Get Scammed Out of $50,000

Plus: State-backed hackers test out generative AI, the US takes down a major Russian military botnet, and 100 hospitals in Romania go offline amid a major ransomware attack...

SUSE CVE-2024-1488

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an...