Defense-in-Depth Security Updates for Microsoft Publisher Products (August 2023)

The Microsoft Publisher Products are missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid179671; scriptversion"1.0"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Windows Group Policy Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Group Policy. An attacker could exploit this vulnerability to bypass certain features. The following products and...

Tesla Jailbreak Bypass SOME Paid Features, Except FSD

By Deeba Ahmed The technical details of these findings will be unveiled at Black Hat USA on Wednesday, August 9, 2023. This is a post from HackRead.com Read the original post: Tesla Jailbreak Bypass SOME Paid Features, Except FSD...

Suprema BioStar 2 License Issue Vulnerability

Suprema BioStar 2 is a web-based biometric security smart lock platform from Suprema Korea. A security vulnerability exists in Suprema BioStar version 2.0 through versions prior to 2.9.1 that stems from the presence of an authentication bypass vulnerability. It is permissible to allow an...

New NodeStealer Variant Targeting Facebook Business Accounts and Crypto Wallets

Cybersecurity researchers have unearthed a Python variant of a stealer malware NodeStealer that's equipped to fully take over Facebook business accounts as well as siphon cryptocurrency. Palo Alto Networks Unit 42 said it detected the previously undocumented strain as part of a campaign that...

Important: Red Hat Bug Fix Advisory: Red Hat OpenShift Pipelines 1.10.5 release

Red Hat OpenShift Pipelines 1.10.5 General Availability release - A cloud-native Continuous Integration and Delivery solution on OpenShift. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible,...

[SECURITY] Fedora 37 Update: kitty-0.26.5-6.fc37

Offloads rendering to the GPU for lower system load and buttery smooth scrolling. Uses threaded rendering to minimize input latency. - Supports all modern terminal features: graphics images, unicode, true-col or, OpenType ligatures, mouse protocol, focus tracking, bracketed paste and several new...

[SECURITY] Fedora 38 Update: kitty-0.29.1-1.fc38

Offloads rendering to the GPU for lower system load and buttery smooth scrolling. Uses threaded rendering to minimize input latency. - Supports all modern terminal features: graphics images, unicode, true-col or, OpenType ligatures, mouse protocol, focus tracking, bracketed paste and several new...

OPENSUSE-SU-2023:0191-1 Security update for zabbix

This update for zabbix fixes the following issues: Updated to latest release 4.0.47, this version fixes CVE-2023-29454 boo1213338: - New Features and Improvements + ZBXNEXT-7694 Added 'utf8mb3' character set support for MySQL database + ZBX-20946 Enabled Bulgarian, Chinese zhTW, German, Greek,...

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability that can be exploited by attackers to bypass security...

Blackbone - Windows Memory Hacking Library

Windows memory hacking library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules loaded...

SUSE: Security Advisory (SUSE-SU-2023:2850-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: yt-dlp-2023.07.06-1.fc37

yt-dlp is a command-line program to download videos from many different online video platforms, such as youtube.com. The project is a fork of youtube-dl with additional features and fixes...

Microsoft Windows Admin Center Spoofing (July 2023)

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by a security spoofing vulnerability. An authenticated, remote attacker can exploit this to bypass security features. Note that Nessus has not tested for th...

Microsoft Azure Active Directory Connect 安全漏洞

Microsoft Azure Active Directory Connect ADC is a service from the U.S.-based Microsoft that provides identity and access management in the cloud. A security vulnerability exists in Microsoft Azure Active Directory Connect. An attacker exploiting the vulnerability could bypass certain features. T...

Microsoft Azure Active Directory Connect 安全漏洞

Microsoft Azure Active Directory Connect ADC is a service from the U.S.-based Microsoft that provides identity and access management in the cloud. A security vulnerability exists in Microsoft Azure Active Directory Connect. An attacker exploiting the vulnerability could bypass certain features...

CVE-2023-3076

The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is only exploitable if the site owner paid to access the plugin's pro features...

CVE-2023-3076

The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is only exploitable if the site owner paid to access the plugin's pro features...

CVE-2023-3077

The MStore API WordPress plugin before 3.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a Blind SQL injection exploitable by unauthenticated users. This is only exploitable if the site owner elected to pay to get access to the plugins' pro features, an...

CVE-2023-29256

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046...