org.keycloak:keycloak-account-freemarker (1.0-alpha-4), org.keycloak:keycloak-login-freemarker (1.0-alpha-4) +1 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (1.0-alpha-4)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-4 - org.keycloak:keycloak-login-freemarker...

PT-2025-8568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A subtraction overflow bug has been resolved in the Linux kernel. The issue occurs when hole end is small enough to cause a subtraction overflow, or when addr + 2 min alignment overflows...

com.textrecruit.ustack:textrecruit-ustack-server (>=1.0.1, <=1.0.31), com.typesafe.akka:akka-file-mailbox_2.10.0-m7 (2.1-m2) +7 more potentially affected by CVE-2021-43797 via io.netty:netty (3.5.4.final)

io.netty:netty MAVEN version 3.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.textrecruit.ustack:textrecruit-ustack-server =1.0.1, =1.0.39, =2.1.96, =2.1.115 - com.zipwhip:zipwhip-api 1.28.3-final...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-40369 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-40369 Source advisory: GHSA-CFQJ-9G2G-W7Q6...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-44140 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-44140 Source advisory: OSV:GHSA-8GW6-W5RW-4G5C...

Product Releases Should Not Be Scary

Every Product Manager and Software Developer should know that pushing feature updates to production via traditional channels is as archaic as painting on cave walls. The smart are always quick to adapt to new, innovative technologies, and this mindset is exactly what makes normal companies great...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-44140 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-44140 Source advisory: MEND:CVE-2021-44140...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-40369 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-40369 Source advisory: MEND:CVE-2021-40369...

CVE-2021-41271

Discourse is a platform for community discussion. In affected versions a maliciously crafted request could cause an error response to be cached by intermediate proxies. This could cause a loss of confidentiality for some content. This issue is patched in the latest stable, beta and tests-passed...

Design/Logic Flaw

Discourse is a platform for community discussion. In affected versions a maliciously crafted request could cause an error response to be cached by intermediate proxies. This could cause a loss of confidentiality for some content. This issue is patched in the latest stable, beta and tests-passed...

ChopChop - ChopChop Is A CLI To Help Developers Scanning Endpoints And Identifying Exposition Of Sensitive Services/Files/Folders

ChopChop is a command-line tool for dynamic application security testing on web applications, initially written by the Michelin CERT. Its goal is to scan several endpoints and identify exposition of services/files/folders through the webroot. Checks/Signatures are declared in a config file by...

ALBA-2021:4541 sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

kernel: tcp: add sanity tests to TCP_QUEUE_SEQ

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCPQUEUESEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ after restoring data in the receive queue. mprotect0x4aa000, 12288, PROTREAD = 0 mmap0x1ffff000, 4096, PROTNONE,...

python: Unsafe use of eval() on data retrieved via HTTP in the test suite

In Python3's Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP...

rt-tests bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

rt-tests bug fix and enhancement update

An update is available for rt-tests. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

PT-2021-1390

Name of the Vulnerable Software and Affected Versions: SSSD affected versions not specified Description: The System Security Services Daemon SSSD service manages access to remote directories and authentication mechanisms, providing the Name Service Switch NSS and the Pluggable Authentication...

Lead a Cross-Organization Test Automation Project Fearlessly!

Last year, Imperva initiated a cross-organizational software project focused on creating a new management console and I had the privilege to lead its test automation effort. In this blog, I will explain the challenges we faced as technical leaders in executing the project and reveal the solutions...

Security Risks with Private 5G Networks in Manufacturing Part. 3

We can see signs of increased activity in areas of business that use 5G around the world. 5G technology will usher in new personal services through smartphones, and it will also play a large part in industry. The option of Private 5G lets private companies and local governments have their own...