kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body

A flaw was found in the Linux kernel's implementation of the BFQ IO scheduler. This flaw allows a local user able to groom system memory to cause kernel memory corruption and possible privilege escalation by abusing a race condition in the IO scheduler...

Important: kernel-livepatch-4.14.173-137.229

Issue Overview: An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfqidleslicetimerbody.CVE-2020-12657 Affected Packages: kernel-livepatch-4.14.173-137.229 Issue Correction: Please ensure you have live patching enabled. Run yum...

A Message to the Young Innovators of Tomorrow

At a time when a global pandemic has forced students to go online to learn, the International Science and Engineering Fair is using the internet to bring together some of the most brilliant and innovative students from all over the world. Collectively, they represent the kind of talent that will ...

Sensitive Data Exposure in extension "Job Fair" (jobfair)

The extension fails to protect or obfuscate filenames of uploaded files. This allows unauthenticated users to download files with sensitive data by simply guessing the filename of uploaded files e.g uploads/txjobfair/cv.pdf...

This Identity Activist Wants to Make Facebook Obsolete

Your digital self is fragmented and owned by third parties. Kaliya Young has a plan to change that—and make tech fairer for all...

london-finance-fair.event.essec.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1006773 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Cyber-Risk Business Cases: Using Economic Impact to Justify TIG Investment

It sure is a difficult time to be a network defender. According to one industry report, as many as 85,000 malicious websites are launched daily, along with 8 million spam and phishing attacks; and, there are anywhere from 30-50 million malicious domains out there at any time. Scale seems to be...

kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service

The CFS Linux kernel scheduler mishandles handling of leaf cfsrq's in the kernel/sched/fair.c code, which allows a local unprivileged attacker to cause a denial of service DoS by entering an infinite loop in updateblockedaverages function by inducing a high load on a system. Due to the nature of...

Fair Share calculation for Bandwidth provisioning on SD-WAN

By default, all branches and WAN services Virtual Path/Internet/Intranet receive equal share of the bandwidth. When there is high difference in terms of bandwidth requirement or availability between the connecting sites, provisioning can be changed accordingly. By default, the ratio is 1000 Share...

DEBIAN-CVE-2018-20784

In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfsrq's, which allows attackers to cause a denial of service infinite loop in updateblockedaverages or possibly have unspecified other impact by inducing a high load...

UBUNTU-CVE-2018-20784

In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfsrq's, which allows attackers to cause a denial of service infinite loop in updateblockedaverages or possibly have unspecified other impact by inducing a high load...

Unbreakable Enterprise kernel security update

4.14.35-1818.5.4 - RDS: null pointer dereference in rdsatomicfreeop Mohamed Ghannam Orabug: 28020694 CVE-2018-5333 - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation Alejandro Jimenez Orabug: 28474853 - x86/speculation: Enable enhanced IBRS usage Alejandro Jimenez Orabug:...

trade-fair-trips.com XSS vulnerability

Open Bug Bounty ID: OBB-692990 Description| Value ---|--- Affected Website:| trade-fair-trips.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Assessing the Human Element in Cyber Risk Analysis

Seventeen percent of data breaches started as social engineering attacks, mostly from email, according to the most recent Verizon Data Breach Investigations Report. In general, employee errors, such as sending an email to the wrong person, also accounted for 17 percent of breaches. Here in lies t...

Fluxion - Set Up Fake AP, Fake DNS, And Create Captive Portal To Trick Users Into Giving You Their Password

Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully less bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social engineering phishing attack. It's compatible wit...

How Cyber Insurance Changes the Conversation Around Risk

Premiums paid for cyber insurance could triple to more than $7.5 billion by 2020, according to consultancy PwC. Companies are waking up to the fact that cyber risk equals business risk. Ask FedEx’s European arm, shipping giant Maersk or any of the other major organizations knocked out of operatio...

Denial of Service Vulnerability in Filmfd.sys Processing Malformed Data in Fair Intelligence Antivirus Software

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. filmfd.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A security vulnerability exists in the filmfd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 V8.1.7.6865. An attacker can exploit this...

Denial of Service Vulnerability in Fair Smart Antivirus fildds.sys Handling Malformed Data

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. fildds.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A security vulnerability exists in the fildds.sys driver in Fair Intelligent Antivirus 8 V8.1.5.6109 V8.1.7.6865. An attacker can exploit...

Fair Smart Antivirus 8 filppd.sys Driver Has Denial of Service Vulnerability

Fil Smart Antivirus 8 is an antivirus program from Beijing Fil Shield Technology Co. filppd.sys is a kernel mode driver in Fil Smart Antivirus 8. A denial of service vulnerability exists in the filppd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 and V8.1.7.6865. An attacker can exploit the...

Fair Smart Antivirus 8 ffsmon.sys Driver Has Denial of Service Vulnerability

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. ffsmon.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A denial of service vulnerability exists in the ffsmon.sys driver in Fair Smart Antivirus 8 V8.1.5.6709 and V8.1.7.6865. An attacker can...