@brewer/beerui (>=1.1.9, <=1.1.17), @dirk-bester/dark-light (>=0.0.1, <=1.0.0) +18 more potentially affected by CVE-2023-29003 via @sveltejs/kit (>=1.0.0-next.81, <=1.13.0)

@sveltejs/kit NPM version =1.0.0-next.81, =1.1.9, =0.0.1, =4.6.2, =0.0.0-24593668, =4.3.8, =1.0.4, =1.0.0-next.8, =1.0.0-next.13, =0.0.20, =0.15.0-next.1, =0.19.0, =0.17.0-next.1, =0.18.0 and more Source cves: CVE-2023-29003 Source advisory: OSV:GHSA-5P75-VC5G-8RV2...

@brewer/beerui (>=1.1.9, <=1.1.17), @dirk-bester/dark-light (>=0.0.1, <=1.0.0) +18 more potentially affected by CVE-2023-29003 via @sveltejs/kit (>=1.0.0-next.81, <=1.13.0)

@sveltejs/kit NPM version =1.0.0-next.81, =1.1.9, =0.0.1, =4.6.2, =0.0.0-24593668, =4.3.8, =1.0.4, =1.0.0-next.8, =1.0.0-next.13, =0.0.20, =0.15.0-next.1, =0.19.0, =0.17.0-next.1, =0.18.0 and more Source cves: CVE-2023-29003 Source advisory: GHSA-5P75-VC5G-8RV2...

@brewer/beerui (>=1.1.9, <=1.1.17), @dirk-bester/dark-light (>=0.0.1, <=1.0.0) +18 more potentially affected by CVE-2023-29003 via @sveltejs/kit (>=1.0.0-next.81, <=1.13.0)

@sveltejs/kit NPM version =1.0.0-next.81, =1.1.9, =0.0.1, =4.6.2, =0.0.0-24593668, =4.3.8, =1.0.4, =1.0.0-next.8, =1.0.0-next.13, =0.0.20, =0.15.0-next.1, =0.19.0, =0.17.0-next.1, =0.18.0 and more Source cves: CVE-2023-29003 Source advisory: MEND:CVE-2023-29003...

Svelte cross-site request forgeing vulnerability

svelte is a new way to build web applications from Svelte Open Source. A security vulnerability exists in svelte Kit versions prior to 1.15.1, which originates from bypassing protection by specifying a different "Content-Type" header value. An attacker could exploit the vulnerability to perform...

SUSE: Security Advisory (SUSE-SU-2023:1734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: ImageMagick-6.9.12.82-1.fc36

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

SUSE: Security Advisory (SUSE-SU-2023:1684-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:1659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0556-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0872-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:1622-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0663-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0667-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0681-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-2913 · Tp Link · Tp-Link Tl-Wpa4530 Kit

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WPA4530 KIT versions V2 EU 161115 through V2 EU 170406 Description: The issue is related to Command Injection via the httpRpmPlcDeviceRemove endpoint. It is also associated with the httpRpmPlcDeviceAdd function, where the...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6604037297668096 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

p11-kit:rpc_fuzzer: Global-buffer-overflow in base_C_MessageSignFinal

Project: https://github.com/p11-glue/p11-kit.git Detailed Report: https://oss-fuzz.com/testcase?key=6623816343486464 Project: p11-kit Fuzzing Engine: afl Fuzz Target: rpcfuzzer Job Type: aflasanp11-kit Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000009aa018 Cras...

p11-kit:rpc_fuzzer: Global-buffer-overflow in base_C_MessageEncryptInit

Project: https://github.com/p11-glue/p11-kit.git Detailed Report: https://oss-fuzz.com/testcase?key=5496761560203264 Project: p11-kit Fuzzing Engine: libFuzzer Fuzz Target: rpcfuzzer Job Type: libfuzzerasanp11-kit Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...

Microsoft Warns of Large-Scale Use of Phishing Kits to Send Millions of Emails Daily

An open source adversary-in-the-middle AiTM phishing kit has found a number of takers in the cybercrime world for its ability to orchestrate attacks at scale. The Microsoft Threat Intelligence team is tracking the threat actor behind the development of the kit under its emerging moniker DEV-1101...