openSUSE Security Update : rmt-server (openSUSE-2020-1993)

This update for rmt-server fixes the following issues : Update to version 2.6.5 : - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Add web server settings to /etc/rmt.conf: Now it's...

Telegram Still Hasn’t Removed an AI Bot That’s Abusing Women

A deepfake bot has been generating explicit, non-consensual images on the platform. The researchers who found it say their warnings have been ignored...

Scams Ramp Up Ahead of Black Friday Cybercriminal Craze

The number of online holiday shoppers this year is expected to skyrocket due to the pandemic – and consequently, consumers can expect an onslaught of scams, phishing attacks and other malicious activities. The risk of infection is driving consumers to shop from the safety of their homes, rather...

Tfsec - Security Scanner For Your Terraform Code

tfsec uses static analysis of your terraform templates to spot potential security issues. Now with terraform v0.12+ support. Example Output Installation Install with brew/linuxbrew: brew install tfsec Install with Chocolatey: choco install tfsec You can also grab the binary for your system from t...

RTOP Analyzer

RTOP Analyzer - v2.1.0.0 Created Date: Jun 22, 2016 Updated Date: Apr 30, 2018 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the downloa...

RUSTSEC-2020-0079 `socket2` invalidly assumes the memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

`socket2` invalidly assumes the memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

CloudBees Jenkins Cross-Site Request Forgery Vulnerability (CNVD-2020-55183)

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

CVE-2020-2280

A cross-site request forgery CSRF vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code...

CVE-2020-2280

A cross-site request forgery CSRF vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code...

CVE-2020-2280

A cross-site request forgery CSRF vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code...

CVE-2020-2280

CVE-2020-2280 is a CSRF vulnerability in Jenkins Warnings Plugin (version 5.0.1 and earlier) that could allow an attacker to execute arbitrary code on affected servers. The issue affects the Jenkins Warnings Plugin component/file path responsible for form validation, stemming from a missing POST ...

Elastic layers are disconnected and not accessible in session host

Environment before 20.52005 observed theElastic layers were disconnected on the VDA abruptly and were not available for exiting user connections or for new users.. The below errors are seen though the layers had been attached by a prior domain user. --ulayersvc.log-- 2020-03-23 13:23:02,140 WARN...

Avoid these PayPal phishing emails

For the last few weeks, there’s been a solid stream of fake PayPal emails in circulation, twisting FOMO fear of missing out into DO THIS OR BAD THINGS WILL HAPPEN. It’s one of the most common tools in the scammer’s arsenal, and a little pressure applied in the right way often brings results for...

SUSE SLED15 / SLES15 Security Update : nasm (SUSE-SU-2020:1843-1)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...

firefox security update

68.8.0-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one Wed Apr 29 2020 Jan Horak - Update to 68.8.0 build1 68.7.0-3 - Added fix for rhbz1821418 68.7.0-2 - Update to 68.7.0 build3 68.6.1-1 - Update to 68.6.1 ESR Wed Mar 04 2020 Jan Horak -...

ThiefQuest Ransomware for the Mac

There's a new ransomware for the Mac called ThiefQuest or EvilQuest. It's hard to get infected: For your Mac to become infected, you would need to torrent a compromised installer and then dismiss a series of warnings from Apple in order to run it. It's a good reminder to get your software from...

Fedora 31 : tcpreplay (2020-256ac53cc7)

This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...

Fedora 32 : tcpreplay (2020-f47830961a)

This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...