June 13, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5027541)

June 13, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 KB5027541 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1...

Oracle DB Broken PDB Isolation / Metadata Exposure

Title: CVE-2021-2173 – PDB Isolation is broken through metadata exposure Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2, 12.2.0.1, 18c, 19c Tested Versions: 19c Risk Level: Medium Solution Status: Fixed CVE Reference: CVE-2021-2173 Author of Advisory: Emad Al-Mousa Overview:...

Oracle DB Broken PDB Isolation / Metadata Exposure Vulnerability

Proof of concept details for Oracle database versions 12.1.0.2, 12.2.0.1, 18c, and 19c that had a PDB isolation vulnerability allowing viewing of metadata for a different database within the same container. Title: CVE-2021-2173 – PDB Isolation is broken through metadata exposure Product: Database...

Malicious Package

Overview pdb-geobase is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview pdb-uatraits is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview pdb-extensions is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

SUSE CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

SUSE CVE-2014-9807

The pdb coder in ImageMagick allows remote attackers to cause a denial of service double free via unspecified vectors...

SUSE CVE-2015-8902

The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted PDB file...

SUSE CVE-2016-7531

MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...

SUSE CVE-2016-7537

MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted PDB file...

SUSE CVE-2017-12674

In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service...

Malicious code in pdb-geobase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcae6376270cf9586731727aed3a60ef10126ec0fa41a3c3ec04da7169fef7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-671 Malicious code in pdb-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01d39a5912b29ddba1313f299abcf80c8aca983b9d61a8f6580726c7e1a6e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-672 Malicious code in pdb-geobase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcae6376270cf9586731727aed3a60ef10126ec0fa41a3c3ec04da7169fef7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-673 Malicious code in pdb-uatraits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caaa36f387540b9f211b5d8ba41dedb21e51c841fe4a792db8b63d07b7f82370 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Upgrade fails due to /var partition filling.

ADC upgrade is failing due to /var folder filling. Checking the /var folder we notice that /var/partitions is taking up a lot of the space. Looking into this further we can see there are many .pdb files taking up space within directory/var/partitions//nscollectRRD...

Mageia: Security Advisory (MGASA-2020-0329)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RANSOMWARE: Ranzy Locker

On 25 October 2021, the FBI released a report documenting their findings about a ransomware variant known as Ranzy Locker. While Ranzy Locker has not been used as prolifically as Conti or Darkside, it does leverage some of the same old ransomware tricks to attack its victims. In conjunction with...

Ransomware in the CIS

Introduction These days, when speaking of cyberthreats, most people have in mind ransomware, specifically cryptomalware. In 2020–2021, with the outbreak of the pandemic and the emergence of several major cybercriminal groups Maze, REvil, Conti, DarkSide, Avaddon, an entire criminal ecosystem took...