Elon Musk's Twitter Blue Verification Is a Gift to Scammers

Anyone can get a blue tick on Twitter without proving who they are. And it’s already causing a ton of problems...

CVE-2022-3715

A flaw was found in the bash package, where a heap-buffer overflow can occur in validparametertransform. This issue may lead to memory problems...

PT-2022-17447 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to memory corruption due to use after free in a service. This occurs when trying to access maps by different threads, which can lead to instability...

USN-5583-2: systemd regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a regression by introducing netowrking problems for some users. This update fixes the problem. We apologize for the inconvenience...

PT-2022-17437

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Wired Infrastructure and Networking affected versions not specified Description The issue is related to cryptographic problems in the Board Support Package BSP due to improper hash verification. This affects the Snapdragon...

OPENSUSE-SU-2022:10087-1 Security update for opera

This update for opera fixes the following issues: opera was updated to 89.0.4447.71 - CHR-8957 Update chromium on desktop-stable-103-4447 to 103.0.5060.134 - DNA-100492 authPrivate.storeCredentials should work with running auth session - DNA-100649 “Sign out” from settings doesn’t also sign out...

SUSE: Security Advisory (SUSE-SU-2022:2659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NIST Announces First Four Quantum-Resistant Cryptographic Algorithms

The U.S. Department of Commerce's National Institute of Standards and Technology NIST has chosen the first set of quantum-resistant encryption algorithms that are designed to "withstand the assault of a future quantum computer." The post-quantum cryptography PQC technologies include the...

Using SafeTransferLib as a transfer medium has a certain probability of causing problems

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. function exerciseOrder memory order, uint256 calldata floorAssetTokenIds public payable / CHECKS / bytes32 orderHash = hashOrderorder; // check user owns the position requireownerOfuint256orderHash ==...

PT-2022-32055

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to locking problems with loops over idev-addr list. The actual impact and potential for attacks have not been proven yet. Recommendations For versions prior to v5.4.198,...

PT-2022-32170

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to locking problems with loops over idev-addr list. The actual impact and potential for attacks have not been proven yet. Recommendations For Linux Kernel versions prior...

PT-2022-31673

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to locking problems with loops over idev-addr list. The actual impact and potential for attacks have not been proven yet. Recommendations For versions prior to v5.15.46,...

PT-2022-31419

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to locking problems with loops over idev-addr list. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions prior t...

PT-2022-31100

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns locking problems with loops over idev-addr list. The actual impact and potential for attacks have not been fully determined. Recommendations For Linux Kernel versions prior ...

PT-2022-31901

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to locking problems with loops over idev-addr list. The actual impact and potential for attacks have not been proven yet. Recommendations For versions prior to v5.10.121...

PT-2022-31072

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists where a pointer is not properly set to NULL after being freed, which may lead to security problems. The actual impact and likelihood of an attack have not been...

How one Microsoft software engineer works to improve access management

There’s still a perception that the most successful computer scientists learn programming at a young age, study engineering at a top school, and then get a software development job right out of college. While that’s how many people enter the field, it’s not the only path. Microsoft Software...

PT-2022-15876

Name of the Vulnerable Software and Affected Versions ZTE MF297D affected versions not specified Description The issue is related to cryptographic problems due to the use of weak random values, which reduces the security of the device and may increase the risk of attack. Recommendations At the...

Microsoft Patch Tuesday, May 2022 Edition

Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This months patch batch includes fixes for seven "critical" flaws, as well as a zero-day vulnerability that affects all supported versions of Windows. By all...

Mozilla Firefox Privilege Permission and Access Control Issues Vulnerability (CNVD-2023-59955)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a Permission Granting and Access Control Issue vulnerability that stems from improper management of permissions in the application. An attacker could exploit the...