Unspecified Vulnerability in JetBrains YouTrack

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. A security vulnerability exists in...

CVE-2024-47160

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible...

CVE-2024-47160

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible...

Talk of election security is good, but we still need more money to solve the problem

Last week, six Secretaries of State testified to U.S. Congress about the current state of election security ahead of November's Presidential election. Some of the same topics came up as usual -- disinformation campaigns, influence from foreign actors, and the physical protection of poll workers o...

CVE-2024-47160

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible...

CVE-2024-47160

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible...

CVE-2024-47160: Incorrect Authorization

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible...

PT-2024-6630

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.44799 Description: The issue is related to insufficient authorization mechanisms in JetBrains YouTrack, allowing access to global app config data without proper permissions. This could enable a remo...

JetBrains YouTrack security vulnerabilities

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. A security vulnerability exists in...

Global Crime Hit as Europol Shuts Down Encrypted Chat App Ghost

Europol, alongside global law enforcement, dismantled the encrypted chat app Ghost, widely used by criminal networks for drug…...

The Rising Cost of Vulnerable APIs and Bot Attacks – A $186 Billion Wake-Up Call for Businesses

How much do bot attacks and API insecurity cost organizations? To answer these questions, Imperva engaged the Marsh McLennan Cyber Risk Intelligence Center to analyze incident data related to vulnerable APIs and bot attacks. Imperva’s latest report, “The Economic Impact of API and Bot Attacks,"...

libical: global-buffer-overflow in icaltime_timegm

With the following new fuzz target: include include include include include "/src/libical/src/libical/icalcomponent.h" extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size char icalstring = char mallocsize + 1; memcpyicalstring, data, size; icalstringsize = '\0'; icalcomponent comp ...

openbabel: global-buffer-overflow in OpenBabel::generate_sequence

With the following new fuzz target: include include include include include "/src/openbabel/include/openbabel/inchiformat.h" include "/src/openbabel/include/openbabel/format.h" // Fixed line include extern "C" int LLVMFuzzerTestOneInputconst uint8t Data, sizet Size using namespace std; using...

NextCloud Desktop Client security vulnerabilities

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany.Nextcloud Desktop Client is a desktop client application for Nextcloud. A security vulnerability exists in Nextcloud Desktop Client versions 3.13.1 through...

Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences

Torrance, United States / California, 12th September 2024, CyberNewsWire...

Chinese DragonRank Hackers Exploit Global Windows Servers in SEO Fraud

DragonRank, a Chinese-speaking hacking group, has compromised 30+ Windows servers globally. They exploit IIS vulnerabilities to manipulate SEO…...

Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate

The Singapore Police Force SPF has announced the arrest of five Chinese nationals and one Singaporean man for their alleged involvement in illicit cyber activities in the country. The development comes after a group of about 160 law enforcement officials conducted a series of raids on September 9...

gfs2: Fix potential glock use-after-free on unmount

...

Critical GeoServer Vulnerability Exploited in Global Malware Campaign

A critical GeoServer vulnerability CVE-2024-36401 is being actively exploited, allowing attackers to take control of systems for malware…...

CVE-2024-8427

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveglobalsettings and processformedit functions in all versions up to, and including, 1.2.2. This makes i...