SUSE: Security Advisory (SUSE-SU-2023:2640-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple server-side request forgery vulnerabilities in Trend Micro Apex Central (July 2023)

Overview Trend Micro Apex Central is vulnerable to multiple server-side request forgeries. Trend Micro Incorporated has released Patch 5 build 6481 for Trend Micro Apex Central. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact...

micro-dot.net Cross Site Scripting vulnerability OBB-3572629

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DEBIAN-CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure...

ALPINE-CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality...

ALPINE-CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure...

UBUNTU-CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality...

UBUNTU-CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure...

AMD Radeon Security Vulnerability

AMD Radeon is a device driver and utility software package for Advanced Micro Devices graphics cards and GPUs from UltraMicro Semiconductor AMD. A security vulnerability exists in AMD Radeon Software Crimson ReLive Edition, which stems from the presence of a privilege escalation vulnerability...

AMD CPUs Security Vulnerabilities

AMD CPUs are a family of CPUs from the American company Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD CPUs. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

PT-2023-4303

Name of the Vulnerable Software and Affected Versions AMD CPUs affected versions not specified AMD Zen CPUs affected versions not specified AMD Zen1 to Zen4 CPUs affected versions not specified Description A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...

SUSE: Security Advisory (SUSE-SU-2023:3208-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HPESBHF04504 rev.1 - Certain HPE ProLiant AMD Servers Using AMD EPYC Processors, AMD-SB-7008, Cross-Process Information Leak (Zenbleed) Security Notice, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL385 Gen10 Server - Prior to v2.8007-31-2023 HPE ProLiant DL325 Gen10 Server - Prior to v2.8007-31-2023 HPE ProLiant DL385 Gen10 Plus server - Prior to...

New SkidMap Linux Malware Variant Targeting Vulnerable Redis Servers

Vulnerable Redis services have been targeted by a "new, improved, dangerous" variant of a malware called SkidMap that's engineered to target a wide range of Linux distributions. "The malicious nature of this malware is to adapt to the system on which it is executed," Trustwave security researcher...

Latest Batloader Campaigns Use Pyarmor Pro for Evasion

In June 2023, Trend Micro observed an upgrade to the evasion techniques used by the Batloader initial access malware, which we’ve covered in previous blog entries...

Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems

Threat actors are using an open-source rootkit called Reptile to target Linux systems in South Korea. "Unlike other rootkit malware that typically only provide concealment capabilities, Reptile goes a step further by offering a reverse shell, allowing threat actors to easily take control of...

SUSE CVE-2023-20583

A potential power side-channel vulnerability in AMD processors may allow an authenticated attacker to monitor the CPU power consumption as the data in a cache line changes over time potentially resulting in a leak of sensitive information...

The vulnerability of the uClibC and uClibC-ng libraries used by Hirschmann EAGLE industrial network interfaces allows attackers to execute arbitrary code.

The vulnerability of the uClibC and uClibC-ng libraries used by Hirschmann EAGLE industrial network switches is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FakeTrade Android Malware Attack Steals Crypto Wallet Data

By Deeba Ahmed Dubbed CherryBlos and FakeTrade by researchers, these two malware campaigns have been identified as potentially related by Trend Micro. This is a post from HackRead.com Read the original post: FakeTrade Android Malware Attack Steals Crypto Wallet Data...

Debian dla-3511 : amd64-microcode - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3511 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3511-1 [email protected]...