Motel One Group’s Swift Response Thwarts Ransomware Attack

By Waqas Europe's Leading Hotel Operator Takes Immediate Action to Protect Customer Data. This is a post from HackRead.com Read the original post: Motel One Groups Swift Response Thwarts Ransomware Attack...

CVE-2023-0506

CVE-2023-0506 affects ByDemes Group Airspace CCTV Web Service version 2.616.BY00.11, with a privilege escalation in the Camera Control Panel. A low-privilege attacker could gain administrator access, per the NVD/NVD-derived description. The connected documents provide the vulnerable component and...

CVE-2023-0506 ByDemes Group Airspace CCTV Web Service Improper Access Control

The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access...

Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation

Arm has released security patches to contain a security flaw in the Mali GPU Kernel Driver that has come under active exploitation in the wild. Tracked as CVE-2023-4211, the shortcoming impacts the following driver versions - Midgard GPU Kernel Driver: All versions from r12p0 - r32p0 Bifrost GPU...

Pure Storage FlashArray Security Vulnerability

The Pure Storage FlashArray is an all-QLC flash storage array from Pure Storage. A security vulnerability exists in FlashArray Purity, which arises from a flaw in FlashArray Purity that allows an array administrator to change the retention lock of a pgroup and disable pgroup SafeMode protection...

PT-2023-16318 · Bydemes · Bydemes Group Airspace Cctv Web Service

Name of the Vulnerable Software and Affected Versions: ByDemes Group Airspace CCTV Web Service version 2.616.BY00.11 Description: The web service of ByDemes Group Airspace CCTV Web Service contains a privilege escalation issue, detected in the Camera Control Panel. This could allow a low-privileg...

GitLab 13.12 < 16.2.8 / 16.3.0 < 16.3.5 / 16.4.0 < 16.4.1 (CVE-2023-5106)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to...

CVE-2023-5106

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports...

CVE-2023-5106

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports...

UBUNTU-CVE-2023-5106

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports...

CVE-2023-5106

Removed by vendor...

CVE-2023-5106 Incorrect Authorization in GitLab

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports...

PT-2023-31754 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 13.12 through 16.2.8 GitLab EE versions 16.3.0 through 16.3.5 GitLab EE versions 16.4.0 through 16.4.1 Description: An issue has been discovered in Ultimate-licensed GitLab EE that could allow an attacker to impersonate use...

GitLab Enterprise Edition Security Vulnerability

GitLab Enterprise Edition EE is a content management system from GitLab, Inc. in the United States. A security vulnerability exists in GitLab Enterprise Edition that stems from a vulnerability that allows an attacker to emulate a user in a CI pipeline by directly transferring a group import...

Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

Sophisticated cyber actors backed by Iran known as OilRig have been linked to a spear-phishing campaign that infects victims with a new strain of malware called Menorah. "The malware was designed for cyberespionage, capable of identifying the machine, reading and uploading files from the machine,...

Mozilla Rushes to Fix Critical Vulnerability in Firefox and Thunderbird

By Waqas The vulnerability was reported by Clément Lecigne of Google's Threat Analysis Group TAG. This is a post from HackRead.com Read the original post: Mozilla Rushes to Fix Critical Vulnerability in Firefox and Thunderbird...

CVE-2023-5260

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

Lazarus Group Impersonates Recruiter from Meta to Target Spanish Aerospace Firm

The North Korea-linked Lazarus Group has been linked to a cyber espionage attack targeting an unnamed aerospace company in Spain in which employees of the firm were approached by the threat actor posing as a recruiter for Meta. "Employees of the targeted company were contacted by a fake recruiter...

PT-2023-31982 · Sourcecodester · Sourcecodester Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue has been found in the processing of the file group validator.php, where the manipulation of the club id argument leads to SQL injection. The attack can be...

JetBrains TeamCity < 2022.10.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.10.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. CVE-2022-48342 - In JetBrains TeamCity before 2022.10.2 there was an XSS...