CVE-2022-28693

Unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

How to Build and Enable a Cyber Target Operating Model

Cybersecurity is complex and ever-changing. Organisations should be able to evaluate their capabilities and identify areas where improvement is needed. In the webinar “Foundational Components to Enable a Cyber Target Operating Model,” – part two of our Cybersecurity Series – Jason Hart, Chief...

Improper Input Validation

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state. A flaw was found in the Puppet...

Unbreakable Enterprise kernel security update

4.1.12-124.64.1 - iscsi-target: Fix the issue with shutdownsession removal Gulam Mohamed Orabug: 29661566 - scsi: target: fix hang when multiple threads try to destroy the same iscsi session Gulam Mohamed Orabug: 29661566 - scsi: target: remove boilerplate code Gulam Mohamed Orabug: 29661566 -...

CVE-2022-23719

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...

GSD-2022-1003744 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003552 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003442 scsi: target: tcmu: Avoid holding XArray lock when calling lock_page

scsi: target: tcmu: Avoid holding XArray lock when calling lockpage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003150 scsi: target: tcmu: Avoid holding XArray lock when calling lock_page

scsi: target: tcmu: Avoid holding XArray lock when calling lockpage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003096 scsi: target: tcmu: Fix possible data corruption

scsi: target: tcmu: Fix possible data corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003010 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002833 scsi: target: tcmu: Avoid holding XArray lock when calling lock_page

scsi: target: tcmu: Avoid holding XArray lock when calling lockpage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002814 scsi: target: tcmu: Fix possible data corruption

scsi: target: tcmu: Fix possible data corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

Malicious Package

Overview target-campaign-library is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

PVS-1912 - Write cache redirected to server

Write cache redirected to PVS server during PVS Target Boot...

Malicious code in target-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c59506677724de632647df0aebc8466731cbfc6befe523baf29864ba6623e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6420 Malicious code in target-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c59506677724de632647df0aebc8466731cbfc6befe523baf29864ba6623e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in target-global-mbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c454857fbb475e3cdc8810d6ff28bf9d3b69a804386050c090292fa056fc5035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6419 Malicious code in target-global-mbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c454857fbb475e3cdc8810d6ff28bf9d3b69a804386050c090292fa056fc5035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...