new packages: gcc-toolset-10-annobin

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-10-annobin packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

CVE-2020-14750 — Oracle WebLogic Remote Unauthenticated Remote Code Execution (RCE) Vulnerability

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

Vulnerability in Platform Mechanism AutoIP

SICK received a report from IOActive that informed SICK about a security vulnerability within the platform mechanism AutoIP, used by multiple devices. SICK recommends updating to the newest version. Refer to the recommended remediations for affected products where no update is available. Currentl...

CVE-2020-14015

An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a...

CVE-2017-1135

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

Would You Have Fallen for This Phone Scam?

You may have heard that today's phone fraudsters like to use caller ID spoofing services to make their scam calls seem more believable. But you probably didn't know that these fraudsters also can use caller ID spoofing to trick your bank into giving up information about recent transactions on you...

gcc-toolset-9-strace bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...

CVE-2019-20617

An issue was discovered on Samsung mobile devices with P9.0 software. Secure Folder leaks preview data of recent apps. The Samsung ID is SVE-2018-13764 March 2019...

CVE-2020-0041

creationtimestamp| type| source ---|---|--- 2020-03-10 21:31:51+00:00| published-proof-of-concept| https://t.me/androidMalware/720 2020-03-12 04:37:48+00:00| published-proof-of-concept| https://t.me/antichat/8056 2020-03-31 00:02:42+00:00| published-proof-of-concept| https://t.me/R0Crew/1471...

CVE-2020-0668

creationtimestamp| type| source ---|---|--- 2020-02-23 00:04:08+00:00| published-proof-of-concept| https://t.me/hybgl/25 2020-05-07 13:57:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve20200668servicetracing.rb 2021-09-21 04:41:55+00:0...

CVE-2017-3211

Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization...

CVE-2019-8770

The issue was addressed with improved permissions logic. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access recent documents...

CVE-2019-8770

The issue was addressed with improved permissions logic. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access recent documents...

FUDForum 3.0.9 - Remote Code Execution

Exploit Title : FUDForum 3.0.9 - Remote Code Execution Date: 2019-10-26 Exploit Author: liquidsky JMcPeters Vulnerable Software: FUDForum 3.0.9 Vendor Homepage: https://sourceforge.net/projects/fudforum/ Version: 3.0.9 Software Link:...

new packages: gcc-toolset-9-dyninst

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-dyninst packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

Unspecified Vulnerability in Apple macOS Catalina SharedFileList Component

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.SharedFileList is one of the shared file list components. A security vulnerability exists in the SharedFileList component in Apple macOS Catalina versions prior to 10.15. The vulnerability can be exploited...

CB TAU Threat Intelligence Notification: Winnti Malware 4.0

Winnti is a family of malware used by multiple Chinese threat actors like APT41. Carbon Black’s Threat Analysis Unit TAU is providing this technical analysis, YARA rules, IOCs and product rules for the research community. Behavioral Summary Winnti malware is installed manually with stolen...

CVE-2019-11510

creationtimestamp| type| source ---|---|--- 2019-08-24 22:07:53+00:00| exploited| https://t.me/canyoupwnme/5852 2019-08-24 22:31:47+00:00| published-proof-of-concept| https://t.me/antichat/6352 2019-08-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=414 2019-08-27...

spice-gtk security and bug fix update

libgovirt 0.3.4-2 - Parse XML nodes automatically Related: rhbz1427467 - Set detailed error message for async call Related: rhbz1427467 spice-gtk 0.35-4 - Fix bad channel-reset on usbredir Resolves: rhbz1625550 0.35-3 - Fix insufficient encoding checks for LZ Resolves: rhbz1598652 spice-vdagent...

Information Disclosure

mediawiki is vulnerable to information disclosure. The privileged API responses which states whether a recent change has been patrolled can be disclosed to public as those are possible to cache publicly...