Malware Analysis: Trickbot

In this day and age, we are not dealing with roughly pieced together, homebrew type of viruses anymore. Malware is an industry, and professional developers are found to exchange, be it by stealing one's code or deliberate collaboration. Attacks are multi-layer these days, with diverse sophisticat...

new packages: initial-setup

An update is available for initial-setup. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Silverstripe XSS Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via 1. a crafted string to the AbsoluteLinks 1. BigSummary 1. ContextSummary 1. EscapeXML 1. FirstParagraph 1. FirstSentence 1...

GHSA-V358-RVXR-WFFX Silverstripe XSS Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via 1. a crafted string to the AbsoluteLinks 1. BigSummary 1. ContextSummary 1. EscapeXML 1. FirstParagraph 1. FirstSentence 1...

postgresql: libpq processes unencrypted bytes from man-in-the-middle

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption...

gnome-initial-setup bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

gnome-initial-setup bug fix and enhancement update

An update is available for gnome-initial-setup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

Newly patched VMware vulnerability exploited by Iranian espionage group, Rocket Kitten

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here An Iranian cyber espionage gang known as Rocket Kitten has began delivering the Core Impact penetration testing tool on susceptible computers by exploiting a newly fixed severe vulnerability in VMware Workspace ONE...

What will be the consequence of this disputed vulnerability in 7-ZIP?

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here The zero-day vulnerability in 7- Zip software, tracked as CVE-2022-29072 is marked as disputed by the National Vulnerability DatabaseNVD, and sparked discussions over its consequences. This started when a researcher published ...

PT-2022-30452

Name of the Vulnerable Software and Affected Versions drbd versions prior to v5.4.189 Description The issue concerns use after free bugs in the get initial state function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.4.189, update to...

PT-2022-30247

Name of the Vulnerable Software and Affected Versions drbd versions prior to v5.10.111 Description The issue concerns use after free bugs in the get initial state function. It was introduced in version v4.5 and fixed in Linux Kernel version v5.10.111. The actual impact and attack plausibility hav...

PT-2022-29954

Name of the Vulnerable Software and Affected Versions drbd versions prior to v5.15.34 Description The issue concerns use after free bugs in the get initial state function. It was introduced in version v4.5 and fixed in Linux Kernel version v5.15.34. The actual impact and attack plausibility have...

PT-2022-29628

Name of the Vulnerable Software and Affected Versions drbd versions prior to v5.16.20 Description The issue concerns use after free bugs in the get initial state function. It was introduced in version v4.5 and fixed in Linux Kernel version v5.16.20. The actual impact and attack plausibility have...

PT-2022-29285

Name of the Vulnerable Software and Affected Versions drbd versions prior to v5.17.3 Description The issue concerns use after free bugs in the get initial state function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.17.3, update to...

PT-2022-30671

Name of the Vulnerable Software and Affected Versions drbd versions prior to v4.14.276 Description The issue concerns use after free bugs in the get initial state function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v4.14.276, update ...

PT-2022-30581

Name of the Vulnerable Software and Affected Versions drbd versions prior to v4.19.238 Description The issue concerns use after free bugs in the get initial state function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v4.19.238, update ...

PT-2022-30744

Name of the Vulnerable Software and Affected Versions drbd versions prior to v4.9.311 Description The issue concerns use after free bugs in the get initial state function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v4.9.311, update to...

PT-2022-10032

Hive нацелились на серверы Microsoft Exchange По сообщениям исследователей из Varonis, для получения начального доступа рансомварщики используют ProxyShell — достаточно старый набор из трех багов CVE-2021-34473, CVE-2021-34523 и CVE-2021-31297, дающий RCE без необходимости аутентификации. В...

PT-2022-13577 · Siteground · Siteground Security Plugin

Name of the Vulnerable Software and Affected Versions: SiteGround Security plugin for WordPress versions up to, and including, 1.2.5 Description: The issue allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up. This enables...

Google Chrome issues an emergency update to address the third zero-day of year 2022

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A zero-day vulnerability has been discovered in Google Chrome versions prior to 100.0.4896.127. A type of confusion vulnerability tracked as CVE-2022-1364, is said to be exploited in the wild. This vulnerability affects the V8...