3361 matches found
[SECURITY] Fedora 37 Update: ghostscript-9.56.1-8.fc37
This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...
The vulnerability of the demangle_template function in the cplus-dem.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the demangletemplate function in the cplus-dem.c component of the GNU Binutils development environment is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Malicious code in firefly-utilities-helper-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...
The vulnerability of the Utilities component in Oracle Java SE and Java SE Embedded software platforms allows a attacker to trigger a service failure.
The vulnerability of the Utilities component in Oracle Java SE and Java SE Embedded software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
CVE-2023-21250
In gattendoperation of gattutils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
MULTI#STORM Campaign Sets Sights on India and U.S. with RAT
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The MULTISTORM phishing campaign employs JavaScript files to disseminate RATs throughout compromised systems. This intricate attack utilizes a multi-stage procedure that commences when the victim engages...
Google Pixel 安全漏洞
Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in ForegroundUtils in ForegroundUtils.java, where due to a logic error in the code, the application can read NFC tag data while in the background, which could lead to...
Critical Photon OS Security Update - PHSA-2023-5.0-91-0037
Updates of 'calico', 'bindutils', 'samba-client', 'go', 'pmd-ng' packages of Photon OS have been released...
The vulnerability in the set of Sysinternals system utilities for Windows operating systems allows a hacker to trigger a service failure.
The vulnerability in the Sysinternals system utilities for Windows operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Malicious code in mfe-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...
Rogue Android Apps Target Pakistani Individuals in Sophisticated Espionage Campaign
Individuals in the Pakistan region have been targeted using two rogue Android apps available on the Google Play Store as part of a new targeted campaign. Cybersecurity firm Cyfirma attributed the campaign with moderate confidence to a threat actor known as DoNot Team, which is also tracked as...
Fedora: Security Advisory for mariadb (FEDORA-2023-b4ff407364)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-8971
Name of the Vulnerable Software and Affected Versions shadow-utils affected versions not specified Description A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
编号撤回
glib2 is a general-purpose, portable utility library open-sourced by GNOME. Many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, etc. are provided. This CVE number has been withdrawn...
sos bug fix and enhancement update
An update is available for sos. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather information from system...
MAL-2023-375 Malicious code in fc-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b568ae69bdc27fd6f57fbb8cb60fde1777793150449ba9cb6895756e03a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fc-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b568ae69bdc27fd6f57fbb8cb60fde1777793150449ba9cb6895756e03a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
How Joe Marshall helps defend everything from electrical grids to grain co-ops across multiple continents
Joe Marshall was a security practitioner before he even knew it. Marshall started his career in information technology as a systems administrator. On the surface, he jokes that he was a "white-collar plumber" -- fixing IT issues as they arose, handing out new credentials and asking users if they...
