kernel security and bug fix update

3.10.0-1160.95.1.0.1.OL7 - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 3.10.0-1160.95.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 2481767...

PHOENIX CONTACTs WP 6xxx series web panels Operating System Command Injection Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. An operating system command injection vulnerability exists in PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10, which originates from a low-privileged remote attacker who may b...

PHOENIX CONTACTs WP 6xxx series web panels Operating System Command Injection Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. An operating system command injection vulnerability exists in PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10, which originates from a low-privileged remote attacker who may b...

Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems

Threat actors are using an open-source rootkit called Reptile to target Linux systems in South Korea. "Unlike other rootkit malware that typically only provide concealment capabilities, Reptile goes a step further by offering a reverse shell, allowing threat actors to easily take control of...

CVE-2023-3749

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation...

CVE-2023-3749 VideoEdge config

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation...

Operation Narsil INTERPOL Busts Decade-Old Child Abuse Network

By Waqas These networks generated revenues from advertising sexually explicit content involving children. This is a post from HackRead.com Read the original post: Operation Narsil INTERPOL Busts Decade-Old Child Abuse Network...

CVE-2023-3180

A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values differ...

Johnson Controls VideoEdge Data Forgery Issue Vulnerability

Johnson Controls VideoEdge is a security solution from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls VideoEdge that originates from a local user being able to edit configuration files and interfere with VideoEdge operation...

Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor

Threat actors associated with the hacking crew known as Patchwork have been spotted targeting universities and research organizations in China as part of a recently observed campaign. The activity, according to KnownSec 404 Team, entailed the use of a backdoor codenamed EyeShell. Patchwork, also...

Unauthorized Profile "Follow" Operation Bug

Lines of code Vulnerability details Description The contract's followWithSig function allows any user with a valid signature to execute "follow" operations on behalf of any profile without properly verifying the ownership of the profile or checking if the signer is an approved executor. This bug...

The vulnerability of the setOpModeCfg function in TOTOLINK LR350 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the setOpModeCfg function in TOTOLINK LR350 router microprogramming software is related to the lack of measures to protect input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

APT trends report Q2 2023

For more than six years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. These summaries are based on our threat intelligence research; and they provide a representative snapshot of what we have published...

Canonical Ubuntu 安全漏洞

Canonical Ubuntu is a GNU/Linux operating system for desktop applications from Canonical, a British company. A security vulnerability exists in Canonical Ubuntu that stems from Overlayfs ovlcopyupmetainodedata skipping privilege checking when ovldosetxattr is called on the Ubuntu kernel...

Emerson ROC800 授权问题漏洞

The Emerson ROC800 is a series of remote operation controllers from Emerson Electric USA. A security vulnerability exists in the Emerson ROC800 Series RTUs and DL8000 Preset Controller that stems from an authentication bypass vulnerability. An unauthorized attacker could use this vulnerability to...

CVE-2022-46902

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the...

CVE-2022-46902

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the...

Path traversal

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the...

Apple Rolls Out Urgent Patches for Zero-Day Flaws Impacting iPhones, iPads and Macs

Apple has rolled out security updates to iOS, iPadOS, macOS, tvOS, watchOS, and Safari to address several security vulnerabilities, including one actively exploited zero-day bug in the wild. Tracked as CVE-2023-38606, the shortcoming resides in the kernel and permits a malicious app to modify...

CVE-2022-46902

CVE-2022-46902 relates to Vocera Report Server/Voice Server 5.x–5.8. The issue is a path traversal vulnerability in an unzip operation used during a ZIP-based database restore via the Vocera Report Console’s websocket function. During extraction, the code uses file paths from the ZIP without suff...