9637 matches found
Iranian State-Sponsored OilRig Group Deploys 3 New Malware Downloaders
The Iranian state-sponsored threat actor known as OilRig deployed three different downloader malware throughout 2022 to maintain persistent access to victim organizations located in Israel. The three new downloaders have been named ODAgent, OilCheck, and OilBooster by Slovak cybersecurity company...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.12.10 Bug Fix Update
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.12.10 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation...
SUSE CVE-2015-8314
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
GHSA-3M87-5598-2V4F Withdrawn Advisory: Prometheus XSS Vulnerability
Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not apply to the Prometheus golang package. This link is maintained to preserve external references. Original Description A stored, DOM based, cross-site scripting XSS flaw was found in Prometheus before version...
CISA and Partners Release Advisory on Russian SVR-affiliated Cyber Actors Exploiting CVE-2023-42793
Today, CISA—along with the U.S. Federal Bureau of Investigation FBI, National Security Agency NSA, Polish Military Counterintelligence Service SKW, CERT Polska CERT.PL, and the UK’s National Cyber Security Centre NCSC—released a joint Cybersecurity Advisory CSA, Russian Foreign Intelligence Servi...
Devise Security Breach
Devise is a flexible Warden-based authentication solution for Rails. A security vulnerability exists in versions prior to Devise 3.5.4 that stems from incorrectly disposing of a session cookie, which could allow an attacker to gain unauthorized access to a persistent application...
CVE-2015-8314
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
CVE-2015-8314
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
CVE-2015-8314: Cleartext Storage of Sensitive Information
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
CVE-2023-6181
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-6181
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
Remote code execution
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2023-6181
CVE-2023-6181 affects Google Chromecast/Chromecast with Google TV via an oversight in the BCB reboot-handling that occurs in U-Boot, enabling persistent code execution. The issue is described across multiple feeds as a reboot-reason handling flaw with the root cause in BCB and potential for persi...
CVE-2023-6181
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
CVE-2023-48425 affects U-Boot and is described as a vulnerability that results in persistent code execution. The entry indicates a remote-accessable scenario (attack vector: NETWORK, attack complexity: LOW, privileges required: NONE) with high impact on confidentiality, integrity, and availabilit...