PT-2021-17752 · Kde +1 · Kde Discover +1

Name of the Vulnerable Software and Affected Versions: KDE Discover versions prior to 5.21.3 KDE Discover versions prior to 5.18.7 Description: The issue arises from the automatic creation of links to potentially dangerous URLs based on the content of the store.kde.org web site. These URLs are...

Code Injection in prayag2/konsave

✍️ Description konsave is a CLI program that will let you save and apply your KDE Plasma customizations with just one command , which is vulnerable to YAML deserialization attack caused by unsafe loading leads to Arbitary Code Execution. 🕵️‍♂️ Proof of Concept Installation bash pip install konsave...

Kali Linux 2021.1 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates. The summary of the changelog since the 2020.4 release from November 2020 is: Xfce 4.16 - Our preferred and current default desktop environment has been updated and tweaked KDE 5.20 - Plasma also...

MGASA-2021-0067 Updated messagelib packages fix a security vulnerability

In KDE KMail, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended...

Fedora: Security Advisory for kf5-messagelib (FEDORA-2021-bdaf015218)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: kf5-messagelib-19.12.2-2.fc32

KDE Message libraries...

openSUSE Security Update : kdeconnect-kde (openSUSE-2020-2334)

This update for kdeconnect-kde fixes the following issues : - Add fingerprinting for device verification boo1177672. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-2334. The text description of thi...

GLSA-202101-16 : KDE Connect: Denial of service

The remote host is affected by the vulnerability described in GLSA-202101-16 KDE Connect: Denial of service Multiple issues causing excessive resource consumption were found in KDE Connect. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known...

openSUSE Security Update : kdeconnect-kde (openSUSE-2020-2343)

This update for kdeconnect-kde fixes the following issue : - Add fingerprinting for device verification boo1177672. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-2343. The text description of this...

KDE Connect: Denial of service

Background KDE Connect is a project that enables all your devices to communicate with each other. Description Multiple issues causing excessive resource consumption were found in KDE Connect. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known...

GLSA-202101-06 : Ark: Symlink vulnerability

The remote host is affected by the vulnerability described in GLSA-202101-06 Ark: Symlink vulnerability KDE Ark did not fully verify symlinks contained within tar archives. Impact : A remote attacker could entice a user to open a specially crafted tar archive using KDE Ark, possibly resulting in...

Ark: Symlink vulnerability

Background Ark is a graphical file compression/decompression utility with support for multiple formats. Description KDE Ark did not fully verify symlinks contained within tar archives. Impact A remote attacker could entice a user to open a specially crafted tar archive using KDE Ark, possibly...

OPENSUSE-SU-2020:2363-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issue: - Add fingerprinting for device verification boo1177672. This update was imported from the openSUSE:Leap:15.2:Update update project...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2363-1 Rating: important References: 1177672 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fix...

OPENSUSE-SU-2020:2361-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issues: - Add fingerprinting for device verification boo1177672. This update was imported from the openSUSE:Leap:15.1:Update update project...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2361-1 Rating: important References: 1177672 Affected Products: openSUSE Backports SLE-15-SP1 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fix...

OPENSUSE-SU-2020:2343-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issue: - Add fingerprinting for device verification boo1177672...

OPENSUSE-SU-2020:2334-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issues: - Add fingerprinting for device verification boo1177672...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2334-1 Rating: important References: 1177672 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fixes the...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2343-1 Rating: important References: 1177672 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fixes the...