1899 matches found
Green Alliance NF firewall has information leakage vulnerability
Green Alliance NF Firewall is an enterprise-class next-generation border security product constructed by Green Alliance Technology on the basis of the latest generation 64-bit multi-core hardware platform, combined with the application layer security protection concept and high-speed packet...
New Rust-based Ransomware Family Targets Windows, Linux, and ESXi Systems — The Hacker News
Kaspersky security researchers have disclosed details of a brand-new ransomware family written in Rust, making it the third strain after BlackCat and Hive to use the programming language. Luna, as it's called, is "fairly simple" and can run on Windows, Linux, and ESXi systems, with the malware...
CVE-2022-1672
The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks...
Security update for opera (important)
openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10057-1 Rating: important References: Cross-References: CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2294 Affected Products: openSUSE Leap 15.3:NonFree openSUSE Leap 15.4:NonFree An update th...
Aiodnsbrute - DNS Asynchronous Brute Force Utility
A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probably best to avoid...
MAL-2022-6233 Malicious code in speed-tracer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf264fc2873dae357e6c74d02ab97cbe9b1bc2a2f71fbba73e52dc273ee8171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in speed-tracer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf264fc2873dae357e6c74d02ab97cbe9b1bc2a2f71fbba73e52dc273ee8171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Being Prepared for Adversarial Attacks
There is no question that the level of threats facing today’s businesses continues to change on a daily basis. So what are the trends that CISOs need to be on the lookout for? For this episode of the Threatpost podcast, I am joined by Derek Manky, Chief Security Strategist & VP Global Threat...
less bug fix and enhancement update
An update is available for less. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The "less" utility is a text file browser that resembles "more", but allows user...
CVE-2022-30592
liblsquic/lsquicqenchdl.c in LiteSpeed QUIC aka LSQUIC before 3.1.0 mishandles MAXTABLECAPACITY...
kernel: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c
A flaw use-after-free in the Linux kernel USB High Speed Mobile Devices functionality was found in the way user detaches USB device. A local user could use this flaw to crash the system or escalate their privileges on the system...
CVE-2022-22391
IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system files that they should not have access to. IBM X-Force ID: 222059...
CVE-2022-22391
IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system files that they should not have access to. IBM X-Force ID: 222059...
Information disclosure
IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system files that they should not have access to. IBM X-Force ID: 222059...
CVE-2022-22391
IBM Aspera High-Speed Transfer Server/Endpoint prior to 4.3.2 are vulnerable to information disclosure: an authenticated user could obtain information from non-sensitive OS files that should not be accessible. Affected products and versions include IBM Aspera High-Speed Transfer Server and Endpoi...
PT-2022-15405 · Ibm · Ibm Aspera High-Speed Transfer
Name of the Vulnerable Software and Affected Versions: IBM Aspera High-Speed Transfer versions 4.3.1 and earlier Description: The issue allows an authenticated user to obtain information from non-sensitive operating system files that they should not have access to. Recommendations: For IBM Aspera...
IBM Aspera 信息泄露漏洞
IBM Aspera is a fast file transfer and streaming solution built on the IBM FASP protocol from IBM U.S.A. An information disclosure vulnerability exists in IBM Aspera High-Speed Transfer, which could be exploited by attackers to obtain information from non-sensitive operating system files to which...
Security Bulletin: OpenSSL vulnerability impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.3.0 and earlier (CVE-2021-3712)
Summary The fix for OpenSSL vulnerability CVE-2021-3712 is delivered in Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.3.1 Vulnerability Details CVEID:CVE-2021-3712 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an...
CVE-2022-22391
IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system files that they should not have access to. IBM X-Force ID: 222059...
