7083 matches found
Ubuntu 16.04 ESM : Vim vulnerability (USN-5533-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5533-1 advisory. It was discovered that Vim incorrectly handled memory access. If a user were tricked into opening a specially crafted file, an attacker could possibly use this...
Amazon Corretto Java 11.x < 11.0.16.8.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is prior to 11 11.0.16.8.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-11-2022-Jul-19 advisory. - hotspot/compiler CVE-2022-21540 - hotspot/runtime CVE-2022-21541 - xml/jaxp CVE-2022-34169 Note...
KLA12588 Multiple vulnerabilities in Oracle Java SE and GraalVM
Multiple vulnerabilities were found in Oracle Java SE and GraalVM. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerability can be...
Countering Follina Attack (CVE- 2022-30190) with Trellix Network Security Platform’s Advanced Detection Features
Countering Follina Attack CVE- 2022-30190 with Trellix Network Security Platform’s Advanced Detection Features By Vinay Kumar and Chintan Shah · July 19, 2022 Executive summary During the end of May 2022, independent security researcher reported a vulnerability assigned CVE-2022-30190 in Microsof...
Pegasus Spyware Used to Hack Devices of Pro-Democracy Activists in Thailand — The Hacker News
Thai activists involved in the country's pro-democracy protests have had their smartphones infected with NSO Group's infamous Pegasus government-sponsored spyware. At least 30 individuals, spanning activists, academics, lawyers, and NGO workers, are believed to have been targeted between October...
Travel Tours Script 1.0 SQL Injection
┌┌────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...
CIA Whistleblower Found Guilty of Leaking Vault 7 Documents to WikiLeaks
By Deeba Ahmed The Vault 7 leak included trojans, viruses, malware, zero-day exploits, malware remote control systems, and related documents dating… This is a post from HackRead.com Read the original post: CIA Whistleblower Found Guilty of Leaking Vault 7 Documents to WikiLeaks...
New Cache Side Channel Attack Can De-Anonymize Targeted Online Users
A group of academics from the New Jersey Institute of Technology NJIT has warned of a novel technique that could be used to defeat anonymity protections and identify a unique website visitor. "An attacker who has complete or partial control over a website can learn whether a specific target i.e.,...
Endpoint security for Mac: 3 best practices
If you’re one of the 50% of small and medium-sized businesses SMBs that use Mac .devices today, chances are your IT and security teams have a ton of Mac endpoints to monitor. Securing that many endpoints can get really complex, really fast, especially when you consider that the common wisdom that...
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5516-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5516-1 advisory. It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive...
10 Years Journey into API Security Vulnerabilities with Ivan, the CEO of Wallarm
Ivan Novikov, CEO at Wallarm, is an API security expert, bug hunter, security researcher, and blackhat speaker with 24 years of experience in the cybersecurity field. He spent decades in this industry and witnessed exploits as well as growth. Read ahead to understand Ivan’s API Security journey a...
Argo CD improper access control bug can allow malicious user to escalate privileges to admin level
Impact Impacts for versions starting with v1.0.0 All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level. To perform the following exploits, an authorized Argo CD use...
openSUSE 15 Security Update : chafa (openSUSE-SU-2022:10044-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10044-1 advisory. - Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. CVE-2022-2301 Note that Nessus has not tested for this issue but has inste...
Hackers Used Fake Job Offer to Hack and Steal $540 Million from Axie Infinity
The $540 million hack of Axie Infinity's Ronin Bridge in late March 2022 was the consequence of one of its former employees getting tricked by a fraudulent job offer on LinkedIn, it has emerged. According to a report from The Block published last week citing two people familiar with the matter, a...
CentOS 8 : php:8.0 (CESA-2022:5468)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:5468 advisory. - php: password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 Note that Nessus has not tested for this issue but has instead relied...
Rocky Linux 8 : rsyslog (RLSA-2022:4799)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:4799 advisory. - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used...
SUSE SLED15 / SLES15 Security Update : fwupd (SUSE-SU-2022:2322-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2322-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Rocky Linux 8 : .NET Core 3.1 (RLSA-2022:5061)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5061 advisory. - .NET and Visual Studio Information Disclosure Vulnerability. CVE-2022-30184 Note that Nessus has not tested for this issue but has instead relied only on the...
SUSE SLES15 Security Update : dpdk (SUSE-SU-2022:2272-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2272-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...
