CVE-2022-35928

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

MPlayer 资源管理错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A resource management error vulnerability exists in MPlayer v1.5, which stems from post-release reuse in the preinit function of libvo/vov4l2.c. An attacker could use this vulnerability to cause a Denial of Service DoS via a...

KLA12583 SUI vulnerability in Microsoft System Center

A tampering vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-33637 Exploitation Related products Microsoft-Defender-for-Endpoint-for-Windows CVE list CVE-2022-33637 high KB list Solution Instal...

CVE-2022-22390: Improper Privilege Management

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973...

EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2022-1825)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1,...

A week in security (May 30 – June 5)

Last week on Malwarebytes Labs: Intuit phish says "We have put a temporary hold on your account" The Quad commits to strengthening cybersecurity in software, supply chains Double-whammy attack follows fake Covid alert with a bogus bank call Microsoft Office zero-day "Follina"—its not a bug, its a...

PT-2022-12007

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.0.8 and below FortiClient for Linux versions 6.2.9 and below FortiClient for Linux versions 6.4.7 and below FortiClient for Linux versions 7.0.2 and below Description The issue is related to an incorrect...

CVE-2021-44167: Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment for critical resource vulnerability CWE-732 in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links...

Implications of Windows Subsystem for Linux for Adversaries & Defenders (Part 2)

This post is the second of a multi-part blog series that explores and highlights the different risks that Windows Subsystem for Linux WSL poses to an enterprise IT environment. Here we examine different TTPs that abuse WSL and assess different methods to defend against such threats. ← Go to Part ...

CVE-2022-22962: Improper Link Resolution Before File Access

VMware Horizon Agent for Linux prior to 22.x contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file...

CVE-2022-22964: Undefined Security Weakness

VMware Horizon Agent for Linux prior to 22.x contains a local privilege escalation that allows a user to escalate to root due to a vulnerable configuration file...

PT-2022-9229

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.x through 6.2.8 FortiClient for Linux versions 6.4.x through 6.4.2 Description An improper input validation issue may allow an unauthenticated attacker to execute arbitrary code on the host operating system a...

PT-2022-11805

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 7.0.2 and below FortiClient for Linux versions 6.4.7 and below FortiClient for Linux versions 6.2.9 and below Description The issue allows an unauthenticated attacker to access the confighandler webserver via...

CVE-2021-43205: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries...

CVE-2021-22127: Improper Neutralization of Special Elements used in an OS Command

An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious...

CVE-2022-1030: Improper Neutralization of Special Elements used in an OS Command

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute...

Implications of Windows Subsystem for Linux for Adversaries & Defenders (Part 1)

This post is the first of a multi-part blog series that will explore and highlight the different risks that Windows Subsystem for Linux WSL poses to an enterprise IT environment. Here we examine a new Microsoft feature for GNU\Linux that increases the attack surface and introduces a lot more...

PT-2022-6587

Name of the Vulnerable Software and Affected Versions IntelR i915 Graphics drivers for linux versions prior to kernel version 6.2.10 Description The issue is related to improper restriction of operations within the bounds of a memory buffer in some IntelR i915 Graphics drivers for linux. This may...

CVE-2022-23276: Undefined Security Weakness

SQL Server for Linux Containers Elevation of Privilege Vulnerability...

CVE-2022-21825: Improper Access Control

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation...