Ransomware Attack Disrupts Services in 18 Romanian Hospitals

By Deeba Ahmed The cybercrime gang behind the ransomware attack is unknown. This is a post from HackRead.com Read the original post: Ransomware Attack Disrupts Services in 18 Romanian Hospitals...

The vulnerability of the ff_hevc_put_weighted_pred_avg_8_sse() function in the h.265 Libde265 implementation allows a hacker to cause a service failure.

The vulnerability of the ffhevcputweightedpredavg8sse function in the h.265 Libde265 implementation is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures through the use of a...

CVE-2024-25679

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...

CVE-2024-25679

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...

CVE-2024-25679

Affected software : PQUIC (open source). Vulnerability : retention of unused initial encryption keys can disrupt a PSK-configured connection by sending a CONNECTION_CLOSE frame encrypted with the initial key computed (pre-5bde5bb). Impact : confidentiality impact HIGH; availability impact LOW; ot...

CVE-2024-25106

OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A critical vulnerability has been identified in the "/api/orgid/users/emailid" endpoint. This vulnerability allows any authenticated user within an organization to...

CentOS 8 : thunderbird (CESA-2023:1802)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:1802 advisory. - OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted...

The vulnerability of the ip6_dst_gc() function (net/ipv6/route.c) in the Linux kernel’s IPv6 implementation allows a attacker to cause a service failure.

The vulnerability of the ip6dstgc function net/ipv6/route.c in the Linux kernel’s IPv6 implementation is related to incorrect handling of boundary conditions. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the MySQL Server component: The UDF component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to pointer dereferencing errors, which allow attackers to trigger a service failure.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s replication mechanism allows a hacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions...

The vulnerability of component BOM in the macOS operating system allows a hacker to disclose sensitive information or cause a service failure.

The vulnerability of component BOM in the macOS operating system is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the HiredisAllocFns component in the /opt/fs/redisraft/deps/hiredis/alloc.c file of the Redis server management module RedisRaft allows a attacker to cause a service failure or exert other effects.

The vulnerability of the HiredisAllocFns component in the /opt/fs/redisraft/deps/hiredis/alloc.c file of the Redis server management module RedisRaft is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the web interface of the E-DDC3.3 automation station’s microprogramming software, related to uncontrolled resource consumption, allows a intruder to cause a service failure.

The vulnerability of the E-DDC3.3 automation station’s software web interface is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

How to Prepare for a Cyberattack

Deciphering the Cyber Invasion Terrain We exist in an era deeply entrenched in digital dependence, where cyber invasions present significant risks for companies, government establishments, and solitary users. As we hurdle deeper into the digital era, the art of cyber misdemeanors continues to...

AREAL Topkapi Trust Management Issue Vulnerability

AREAL Topkapi, a multi-sector solution from AREAL France, is an innovative software platform that provides functionality far beyond the traditional capabilities of SCADA software. AREAL Topkapi 6.2.4718 and prior versions suffer from a Trust Management Issue vulnerability that stems from an...

The vulnerability of the ANGLE library in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the ANGLE library in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

CVE-2024-1014

Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could interrupt the availability of the administration panel by sending multiple ICMP packets...

SE-elektronic GmbH E-DDC Resource Management Error Vulnerability

The SE-elektronic GmbH E-DDC is a freely configurable building controller from SE-elektronic GmbH, Germany. A resource management error vulnerability exists in SE-elektronic GmbH E-DDC 03.07.03 and earlier versions, which originates from a vulnerability that allows an attacker to interrupt the...