Important: golang

Issue Overview: RESERVED NOTE: https://groups.google.com/g/golang-announce/c/V0aBFqaFsE CVE-2022-41724 Golang: net/http, mime/multipart: denial of service from excessive resource consumption https://groups.google.com/g/golang-announce/c/V0aBFqaFsE CVE-2022-41725 The ScalarMult and ScalarBaseMult...

Exploit for Weak Password Requirements in I-Doit

CVE-2023-37756 – Weak Password Requirement in admin-center lea...

PT-2023-4207 · Apple · Model I/O +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 macOS Monterey versions prior to 12.6.8 Description: The issue is related to the Model I/O framework in macOS and is caused by a buffer overflow in memory. This may result in the disclosure of process memory when...

PT-2023-4269 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 macOS versions prior to 12.6.8 Description: The issue is related to the Model I/O framework in macOS and is associated with information disclosure. Exploitation of this issue may allow an attacker to gain...

[SECURITY] Fedora 38 Update: nodejs16-16.20.1-1.fc38

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

[SECURITY] Fedora 38 Update: nodejs18-18.16.1-1.fc38

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

[SECURITY] Fedora 37 Update: nodejs16-16.20.1-1.fc37

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

[SECURITY] Fedora 37 Update: sysstat-12.6.2-2.fc37

The sysstat package contains the sar, sadf, mpstat, iostat, tapestat, pidstat, cifsiostat and sa tools for Linux. The sar command collects and reports system activity information. The information collected by sar can be saved in a file in a binary format for future inspection. The statistics...

A Bootiful Podcast: Java legend Simon Martinelli on Vaadin, JavaOOQ, and so more

Hi Spring fans! In this installment Josh Long talks to Java legend Simon Martinelli about Vaadin, Spring, JavaOOQ, and more. This episode was recorded live from beautiful Barcelona, Spain at the amazing Spring I/O show!...

Security Bulletin: IBM Facsimile Support for i is vulnerable to local privilege escalation (CVE-2023-30988)

Summary IBM Facsimile Support for i is vulnerable to local privilege escalation as described in the vulnerability details section. IBM Facsimile Support for i has addressed the vulnerability as described in the remediation/fixes section. Vulnerability Details CVEID:CVE-2023-30988 DESCRIPTION: The...

Security Bulletin: IBM Performance Tools for i is vulnerable to local privilege escalation (CVE-2023-30989)

Summary IBM Performance Tools for i is vulnerable to local privilege escalation as described in the vulnerability details section. IBM Performance Tools for i has addressed the vulnerability as described in the remediation/fixes section. Vulnerability Details CVEID:CVE-2023-30989 DESCRIPTION: IBM...

Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to execution of arbitrary code on the system (CVE-2022-1471)

Summary IBM i Modernization Engine for Lifecycle Integration platform component is vulnerable to execution of arbitrary code on the system as described in the Vulnerability Details section. These components are used in IBM i Modernization Engine for Lifecycle Integration for infrastructure suppor...

CVE-2023-30988

The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016...

CVE-2023-30988

The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016...

Privilege escalation

The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016...

CVE-2023-30988 IBM i privilege escalation

The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016...

CVE-2023-30988

The CVE-2023-30988 relates to IBM i Facsimile Support for i on IBM i 7.2–7.5, where a local privilege escalation allows a user with OS-level command-line access to obtain root privileges. Affected products and versions: IBM i 7.2, 7.3, 7.4, 7.5 with Facsimile Support for i. Root cause: local priv...

CVE-2023-30988 IBM i privilege escalation

The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016...

i-form-base (1.0.0) potentially affected by CVE-2023-3691 via layui (2.7.6)

layui NPM version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on layui and may be impacted: - i-form-base 1.0.0 Source cves: CVE-2023-3691 Source advisory: OSV:GHSA-HX4H-676R-J3QP...

PT-2023-23098 · Ibm · Ibm I +1

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.5 Description: The issue concerns a local privilege escalation vulnerability in the Facsimile Support for i product. A malicious actor with command line access to the host operating system can exploit this...