New Report Explains COVID-19's Impact on Cyber Security

Most cybersecurity professionals fully anticipated that cybercriminals would leverage the fear and confusion surrounding the Covid-19 pandemic in their cyberattacks. Of course, malicious emails would contain subjects relating to Covid-19, and malicious downloads would be Covid-19 related. This is...

Hexagon Number Error Vulnerability

Hexagon HXG is an Ether-based ERC20 token. An integer overflow vulnerability exists in the 'transfer' function of the smart system implementation in HXG. An attacker can exploit this vulnerability to unauthorized increase of data assets by providing the 'to' and 'value' parameters...

Cyberattacks targeting BLM movement see widespread increase

By Sudais Asif Cloudflare says that there has been a staggering increase in cyberattacks against the BLM movement. This is a post from HackRead.com Read the original post: Cyberattacks targeting BLM movement see widespread increase...

Inshackle - Instagram Hacks: Track Unfollowers, Increase Your Followers, Download Stories, Etc

Instagram hacks: Track unfollowers, Increase your followers, Download Stories, etc Features: Unfollow Tracker Increase Followers Download: Stories, Saved Content, Following/followers list, Profile Info Unfollow all your following Usage: git clone https://github.com/thelinuxchoice/inshackle cd...

OPPO: No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points

Summary: When a user signs up on https://community.coloros.com he is assigned with a specific User Group which increases with his activity on the community. I found that there is no rate limit implemented on reporting a threat and due to which a User can abuse this functionality to Increase his...

Tracto Digital Error Vulnerability

Tracto TRCT is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'increaseApproval' function in TRCT's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

PolyAI has a flawed logic vulnerability

PolyAI AI is an ethereum-based virtual currency.A security vulnerability exists in the 'mintToken' function in AI's smart contract implementation. An attacker can exploit the vulnerability to increase the balance of a digital asset at any address...

gcc-toolset-9-binutils bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...

polkit security and bug fix update

0.112-26.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.112-26 - Refined upstream fix of CVE-2018-1116 to avoid ABI changes - Related: rhbz1601411 0.112-25 - fix of CVE-2018-1116 - Resolves: rhbz1601411 0.112-24 - pkttyagent: resetting terminal erases rest of input line -...

SUSE-SU-2020:0818-1 Security update for cloud-init

This update for cloud-init fixes the following security issues: - CVE-2020-8631: Replaced the theoretically predictable deterministic random number generator with the system RNG bsc1162937. - CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936...

Product update: Virtuozzo 7.0 Update 13 (7.0.13-298)

The Update 13 for Virtuozzo 7.0 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1062.12.1.vz7.131.10. Vulnerability id: PSBM-95072 'pstorage-target' files are left over after successful migrations of VMs on Virtuozzo Storage from...

SUSE-SU-2020:0585-1 Security update for cloud-init

This update for cloud-init fixes the following security issues: - CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. - CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936...

CVE-2013-7098

OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...

CVE-2013-7098

OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...

DEBIAN-CVE-2013-7098

OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...

CVE-2013-7098

OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...

CVE-2013-7098

OpenConnect VPN client with GnuTLS before 5.02 is vulnerable to a heap overflow when MTU is increased on reconnection. Affected component: OpenConnect/GnuTLS stack prior to 5.02. Root cause: heap overflow due to MTU handling on reconnect. Impact is high in affected deployments per CVSS data. Reme...

Apple Opens Its Invite-Only Bug Bounty Program to All Researchers

As promised by Apple in August this year, the company today finally opened its bug bounty program to all security researchers, offering monetary rewards to anyone for reporting vulnerabilities in the iOS, macOS, watchOS, tvOS, iPadOS, and iCloud to the company. Since its launch three years ago,...

The vulnerability of Intel Active Management Technology’s microprogramming software arises from insufficient testing of input data, allowing attackers to exploit this weakness to gain increased privileges.

The vulnerability of Microprogramming Software under Intel Active Management Technology exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...

ThreatList: 90% SMBs Believe Nation-State Actors Are Targeting Them

While APT activity is generally considered to be aimed at large enterprises housing valuable intellectual property, military-industrial entities, dissidents and civil society, and organizations of strategic importance to governments, the vast majority of small- and medium-sized businesses SMBs ar...