Wiz Receives 2023 Global Cloud Security Entrepreneurial Company of the Year Award

Frost & Sullivan applauds Wiz for its innovation and impact in the cloud security industry...

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

A cybercrime enterprise known as Lemon Group is leveraging millions of pre-infected Android smartphones worldwide to carry out their malicious operations, posing significant supply chain risks. "The infection turns these devices into mobile proxies, tools for stealing and selling SMS messages,...

SUSE CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

Upgraded Q -> 2 from #404 [1684435083624]

Judge has assessed an item in Issue 404 as 2 risk. The relevant finding follows: Global Budget Constraint is said to be 2% in Docs But It Is 3% in The code Description: In the docs it is mentioned that Global Budget Constraint should be 2% but in the code here it is hardcoded to 3%. --- The text...

siglongjmp race condition

libcurl provides several different backends for resolving hostnames, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doing this, libcurl used a global buffer that was not mutex protected a...

Water Orthrus Targets Chinese Users with CopperStealth and CopperPhish

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Water Orthrus has recently launched two new campaigns, CopperStealth and CopperPhish, where CopperStealth employs rootkit techniques, while CopperPhish globally distributes a phishing kit through PPI...

io.jenkins.plugins:global-yaml-properties (>=1.17.vd2468d9c5e85, <=1.18.v880576ea_9508), io.jenkins.plugins:nested-data-reporting (5.2.1) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1289.vd1c337fd5354)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1289.vd1c337fd5354 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.jenkins.plugins:global-yaml-properties...

global-it.ch Cross Site Scripting vulnerability OBB-3342888

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-17587 · Mnld · Mnld

Name of the Vulnerable Software and Affected Versions: mnld affected versions not specified Description: The issue is related to a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User...

MediaTek chip security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the mnld module of the MediaTek chips, which stems from a lack of privilege checking and may disclose GPS locations...

global-ordnance.com Cross Site Scripting vulnerability OBB-3332163

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

global-tower.com Cross Site Scripting vulnerability OBB-3327980

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Snake a Stealthy Cyber-Espionage Malware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Snake is a powerful cyber-espionage malware developed by FSB & linked to Turla hackers. Boasts high stealth, rigorous engineering & global reach. To receive real-time threat advisories, please follow...

HID Global DigitalPersona FPSensor code issue vulnerability

HID Global DigitalPersona is a new method of providing authentication services to users from HID Global. A code issue vulnerability exists in HID Global DigitalPersona FPSensor version 1.0.0.1, which stems from a problem with the file C:Program Files x86FPSensorinDpHost.exe, which results in an...

Kimsuky APT Group Employs ReconShark

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Kimsuky, a North Korean APT group, is using a new malware tool called ReconShark to conduct global cyberattacks. To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn...

DEBIAN-CVE-2023-31979

Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...

CVE-2023-31979

Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...

UBUNTU-CVE-2023-31979

Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...

CVE-2023-31979

Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...

PT-2025-54135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s scsi subsystem, specifically within the qedf driver. A NULL dereference issue was identified in the error handling of the qedf alloc global queues...