GHSA-FQ95-RX4Q-QGG2 Cross-site Scripting (XSS) in Admin Login too many attempts notice

Impact Malicious JavaScript has access to all the same objects as the rest of the web page, including access to cookies and local storage, which are often used to store session tokens. If an attacker can obtain a user's session cookie, they can then impersonate that user. Furthermore, JavaScript...

Payment giant's point-of-sale outage caused by ALPHV ransomware

On April 12, 2023, payment giant NCR reported it was looking into an issue with its point-of-sale POS systems that caused an outage, leaving customers unable to use the system. The NCR Aloha POS systems are popular in hospitality services. Customers include Wendys, Chuck e Cheese, Cafe Rio, Leean...

DLA-3389-1 lldpd - security update

Bulletin has no description...

Fake ransomware demands payment without actually encrypting files

Fake it till you make it ransomware groups are trying to get rich off the backs of genuine ransomware authors. Why are they "fake it till you make it"? Because they dont actually create ransomware or compromise networks in any way. Theyre simply lying through their teeth and hoping that recipient...

DLA-3370-1 xrdp - security update

Bulletin has no description...

DSA-5371-1 chromium - security update

Bulletin has no description...

Warning issued over Royal ransomware

As part of its StopRansomware effort, the Cybersecurity and Infrastructure Security Agency CISA has published a Cybersecurity Advisory CSA about Royal ransomware. Royal ransomware is a Ransomware-as-a-service Raas that first made an appearance in January 2022. In September of that year, it began...

DSA-5362-1 frr - security update

Bulletin has no description...

DSA-5359-1 chromium - security update

Bulletin has no description...

DLA-3331-1 python-cryptography - security update

Bulletin has no description...

Chip company loses $250m after ransomware hits supply chain

Applied Materials, one of the worlds leading suppliers of equipment, services, and software for the manufacture of semiconductors, has warned that its second-quarter sales are likely to be hurt to the tune of $250 million due to a cybersecurity attack at one of its suppliers. MKS Instruments Inc...

Toshiba Storage Security Software 授权问题漏洞

Toshiba Storage Security Software is a security software from Toshiba Japan. It allows users to protect CANVIO series hard drives with a unique password and prevents unauthorized users from accessing private information. A security vulnerability exists in Toshiba Storage Security Software version...

CVE-2022-30421

Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained vialocal password authentication module...

CVE-2022-30421

The CVE-2022-30421 entry concerns Toshiba Storage Security Software, version 1.2.0.7413, with an improper authentication flaw that could allow a local attacker to obtain sensitive information via the password authentication module. The issue is described as a local vulnerability with high impact ...

Titan Stealer: A New Golang-Based Information Stealer Malware Emerges

A new Golang-based information stealer malware dubbed Titan Stealer is being advertised by threat actors through their Telegram channel. "The stealer is capable of stealing a variety of information from infected Windows machines, including credential data from browsers and crypto wallets, FTP...

GSD-2023-1001299 eventpoll: add EPOLL_URING_WAKE poll wakeup flag

eventpoll: add EPOLLURINGWAKE poll wakeup flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.162 by commit...

DLA-3271-1 node-minimatch - security update

Bulletin has no description...

DSA-5319-1 openvswitch - security update

Bulletin has no description...

Information Cards Module vulnerable to Cross-site Scripting

A vulnerability was found in Information Cards Module and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The name of the patch is...

GHSA-R894-5R7V-7RX3 easy-scrypt Observable Timing Discrepancy vulnerability

A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. Upgrading to version 1.0.0 can address this issue. The name of the patch is...