Lucene search
K

3037 matches found

The Hacker News
The Hacker News
added 2023/04/28 11:59 a.m.39 views

New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets

Threat actors are advertising a new information stealer for the Apple macOS operating system called Atomic macOS Stealer or AMOS on Telegram for $1,000 per month, joining the likes of MacStealer. "The Atomic macOS Stealer can steal various types of information from the victim's machine, including...

6.9AI score
Exploits0
The Hacker News
The Hacker News
added 2023/04/28 11:59 a.m.4 views

New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets

Threat actors are advertising a new information stealer for the Apple macOS operating system called Atomic macOS Stealer or AMOS on Telegram for $1,000 per month, joining the likes of MacStealer. "The Atomic macOS Stealer can steal various types of information from the victim's machine, including...

6.8AI score
Exploits0
OSV
OSV
added 2023/04/26 11:5 a.m.3 views

OESA-2023-1255 protobuf-c security update

This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format. Security Fixes: protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember.CVE-2022-48468...

5.5CVSS7.3AI score0.00366EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/04/26 12:0 a.m.27 views

SUSE SLES15 Security Update : protobuf-c (SUSE-SU-2023:1979-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1979-1 advisory. - protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. CVE-2022-48468 Note that Nessus has not tested for this...

5.5CVSS6.6AI score0.00366EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/04/26 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2023:1979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.1AI score0.00366EPSS
Exploits0References4
OSV
OSV
added 2023/04/25 7:36 a.m.2 views

SUSE-SU-2023:1979-1 Security update for protobuf-c

This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323...

5.5CVSS5.6AI score0.00366EPSS
Exploits0References3
The Hacker News
The Hacker News
added 2023/04/18 7:10 a.m.2 views

LockBit Ransomware Now Targeting Apple macOS Devices

Threat actors behind the LockBit ransomware operation have developed new artifacts that can encrypt files on devices running Apple's macOS operating system. The development, which was reported by the MalwareHunterTeam over the weekend, appears to be the first time a big-game ransomware crew has...

6.4AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2023/04/17 7:0 a.m.2 views

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

...

5.5CVSS6AI score0.00366EPSS
Exploits0
CNNVD
CNNVD
added 2023/04/17 12:0 a.m.3 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 112, which stems from a Mozilla Maintenance Service write-lock bypass, where a local attacker can trick the Mozilla Maintenance...

5.5CVSS7.5AI score0.00185EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2023/04/14 6:0 a.m.42 views

CVE-2022-48468

A vulnerability was found in protobuf-c. This security flaw leads to an unsigned integer overflow in parserequiredmember...

6.2CVSS6.1AI score0.00366EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/04/14 1:52 a.m.3 views

SUSE CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

7.5CVSS7.9AI score0.00366EPSS
Exploits0References12
OSV
OSV
added 2023/04/13 9:15 p.m.3 views

AZL-26159 CVE-2022-48468 affecting package protobuf-c for versions less than 1.4.1-1

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

5.5CVSS6.8AI score0.00366EPSS
Exploits0References1
Prion
Prion
added 2023/04/13 9:15 p.m.21 views

Integer overflow

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

1.7CVSS5.7AI score0.00366EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2023/04/13 9:15 p.m.0 views

UBUNTU-CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

5.5CVSS6.8AI score0.00366EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/04/13 1:37 a.m.6 views

SUSE CVE-2023-29532

A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not...

5.5CVSS6.1AI score0.00185EPSS
Exploits0References8
CNNVD
CNNVD
added 2023/04/13 12:0 a.m.3 views

BlackVue DR750-2CH LTE 数据伪造问题漏洞

BlackVue DR750-2CH LTE is an in-vehicle full HD monitor from BlackVue. A security vulnerability exists in the BlackVue DR750-2CH LTE version v.1.0122022.10.26, which stems from not checking the authenticity of uploaded firmware. An attacker could exploit the vulnerability to upload a firmware tha...

9.8CVSS8.8AI score0.00735EPSS
Exploits1References5
CVE
CVE
added 2023/04/13 12:0 a.m.359 views

CVE-2022-48468

CVE-2022-48468 affects protobuf-c prior to v1.4.1, with an unsigned integer overflow in parse_required_member. Connected advisories confirm the issue across distributions (e.g., Astra Linux, AlmaLinux, Amazon Linux 2, and Mariner/CBL) and consistently cite protobuf-c before 1.4.1 as vulnerable. T...

5.5CVSS5.8AI score0.00366EPSS
Exploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/13 12:0 a.m.3 views

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

7.5AI score0.00366EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/04/13 12:0 a.m.2 views

protobuf-c 输入验证错误漏洞

protobuf-c is a C-based protocol buffer implementation. A security vulnerability exists in protobuf-c versions prior to 1.4.1, which stems from the presence of an unsigned integer overflow...

5.5CVSS6.7AI score0.00366EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2023/04/12 6:30 a.m.47 views

CVE-2023-29532

The Mozilla Foundation Security Advisory describes this flaw as: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before...

7.5CVSS5.8AI score0.00185EPSS
Exploits0References4
Rows per page
Query Builder