Garage Management System 1.0 Shell Upload Exploit

Exploit Title: Garage Management System Remote Code Execution via File Upload Exploit Author: saitamang Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/mayurik/garage.zip Version: 1.0 Tested on: Centos 7 + MySQL import...

SUSE-SU-2022:2547-2 Security update for logrotate

This update for logrotate fixes the following issues: Security issues fixed: - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' bsc1200278, bsc1200802...

SUSE-SU-2022:2547-1 Security update for logrotate

This update for logrotate fixes the following issues: Security issues fixed: - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' bsc1200278, bsc1200802...

Massive Losses Define Epidemic of ‘Pig Butchering’

U.S. state and federal investigators are being inundated with reports from people whove lost hundreds of thousands or millions of dollars in connection with a complex investment scam known as "pig butchering," wherein people are lured by flirtatious strangers online into investing in cryptocurren...

FBI Warns Fake Crypto Apps are Bilking Investors of Millions

Threat actors have defrauded 244 U.S. investors of about $42 million through fake cryptocurrency apps that exploit people’s legitimate investments in digital currency, the FBI has revealed. The agency observed a number of cybercriminal campaigns that duped people into downloading malicious apps...

Fraudulent cryptocurrency investment apps are duping investors

Together with the Department of Homeland Security DHS and the Cybersecurity and Infrastructure Security Agency CISA, the FBI has released a warning about cybercriminals creating fraudulent cryptocurrency investment apps in order to defraud cryptocurrency investors. The threat actors convince...

Fortinet FortiOS Buffer Overflow (FG-IR-21-206)

The remote host is running a version of FortiOS that is 6.0.x through 6.0.14, 6.2.x through 6.2.10, 6.4.x through 6.4.8, or 7.0.x through 7.0.2. It is, therefore, affected by a stack-based buffer overflow vulnerability. An authenticated, remote attacker can exploit this issue, via specially craft...

(Pwn2Own) Inductive Automation Ignition ZIP File Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

SUSE-SU-2022:2398-1 Security update for logrotate

This update for logrotate fixes the following issues: Security issues fixed: - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' bsc1200278, bsc1200802...

SUSE-SU-2022:2396-1 Security update for logrotate

This update for logrotate fixes the following issues: Security issues fixed: - CVE-2022-1348: Fixed insecure permissions for state file creation bsc1199652. - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword si...

MAL-2022-1457 Malicious code in bancmxqetuhvglwd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f4bbb1a4080a2b28f09f7f4f56a71ff24ff5a1138cfe0c40f5e00667c5cec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5412 Malicious code in polyxqkizwcbvjkm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0516f5f8579181d1209e468a68d63338e8d7bd5a2235e78d4a6fe9e00199fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4136 Malicious code in kdghyalusmjenvpw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abeb39b30782b75abd80ee4d2c4095b1a7f92ef6928a497a9274bdb1997a675 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3384 Malicious code in gkvlwtoaufqdhknb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd887b92f5984431bbe1fefc0429e017bc98c7ac14ce13904e6f7224eac77bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4878 Malicious code in node-child (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 280a54ba81116fa296951b2b9431a78d1055fa15886fb848a98707ec9be36994 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ukrainian Authorities Arrested Phishing Gang That Stole 100 Million UAH

The Cyber Police of Ukraine last week disclosed that it apprehended nine members of a criminal gang that embezzled 100 million hryvnias via hundreds of phishing sites that claimed to offer financial assistance to Ukrainian citizens as part of a campaign aimed at capitalizing on the ongoing...

Google Improves Its Password Manager to Boost Security Across All Platforms

Google on Thursday announced a slew of improvements to its password manager service aimed at creating a more consistent look and feel across different platforms. Central to the changes is a "simplified and unified management experience that's the same in Chrome and Android settings," Ali Sarraf,...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Criminals are applying for remote work using deepfake and stolen identities, says FBI

The FBI has warned businesses of an uptick in reports of criminals applying for remote work using deepfake and stolen PII personally identifiable information. A deepfake is essentially created or modified media image, video, or audio, often with the help of artificial intelligence AI and machine...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...