112 matches found
Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware
The popularity of Brazil's PIX instant payment system has made it a lucrative target for threat actors looking to generate illicit profits using a new malware called GoPIX. Kaspersky, which has been tracking the active campaign since December 2022, said the attacks are pulled off using malicious...
Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware
Introduction As a cybersecurity company, Kaspersky is constantly dealing with known and brand-new malware samples. As part of our crimeware reporting service, we provide our customers with technical reports on the evolution of existing crimeware families, as well as newly emerging ones. In this...
Mageia: Security Advisory (MGASA-2023-0236)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2023-0236 Updated mingw-nsis packages fix security vulnerability
Mishandles access control for an uninstaller directory. CVE-2023-37378...
Updated mingw-nsis packages fix security vulnerability
Mishandles access control for an uninstaller directory. CVE-2023-37378...
Fedora: Security Advisory for mingw-nsis (FEDORA-2023-dfb6cc599f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for mingw-nsis (FEDORA-2023-b9ec99605f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: mingw-nsis-3.09-1.fc38
NSIS, the Nullsoft Scriptable Install System, is a script-driven Windows installation system. This package includes native Fedora binaries of makensis etc. and all plugins...
[SECURITY] Fedora 37 Update: mingw-nsis-3.09-1.fc37
NSIS, the Nullsoft Scriptable Install System, is a script-driven Windows installation system. This package includes native Fedora binaries of makensis etc. and all plugins...
Fedora 37 : mingw-nsis (2023-b9ec99605f)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b9ec99605f advisory. Update to 3.09, fixes CVE-2023-37378. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Fedora 38 : mingw-nsis (2023-dfb6cc599f)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-dfb6cc599f advisory. Update to 3.09, fixes CVE-2023-37378. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Mishandled Access Control
The NSIS Nullsoft Scriptable Install System is vulnerable to Access Control Vulnerability. The vulnerability is due to not restricting or incorrectly restricting access to an uninstaller directory from an unauthorized actor leading to priviledge escalation...
Debian: Security Advisory (DLA-3483-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3483 : nsis - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3483 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3483-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 3483-1] nsis security update
Debian LTS Advisory DLA-3483-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton July 07, 2023 https://wiki.debian.org/LTS Package : nsis Version : 3.04-1+deb9u1 CVE ID : CVE-2023-37378 It was discovered that the Nullsoft Scriptable Install System NSIS before version...
DLA-3483-1 nsis - security update
Bulletin has no description...
CVE-2023-37378
Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...
CVE-2023-37378
Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...
