PayTR Ödeme Ve Elektronik Para Kuruluşu A.Ş. Security Vulnerabilities
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1849)
The remote host is missing an update for the Huawei...
8.1CVSS
8.1AI Score
0.074EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1288)
The remote host is missing an update for the Huawei...
5.5CVSS
6.8AI Score
0.001EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-2560)
The remote host is missing an update for the Huawei...
9.8CVSS
7.8AI Score
0.009EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2461)
The remote host is missing an update for the Huawei...
9.1CVSS
9.7AI Score
0.011EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1152)
The remote host is missing an update for the Huawei...
8.8CVSS
7.7AI Score
0.012EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1565)
The remote host is missing an update for the Huawei...
9.8CVSS
7.8AI Score
0.009EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2019-2307)
The remote host is missing an update for the Huawei...
5.3CVSS
6.2AI Score
0.001EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2631)
The remote host is missing an update for the Huawei...
7.5CVSS
8.7AI Score
0.017EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2295)
The remote host is missing an update for the Huawei...
9.8CVSS
8.8AI Score
0.014EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2000)
The remote host is missing an update for the Huawei...
7.5CVSS
7.8AI Score
0.013EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1142)
The remote host is missing an update for the Huawei...
7.5CVSS
6.7AI Score
0.02EPSS
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1007)
The remote host is missing an update for the Huawei...
3.3CVSS
6.3AI Score
0.001EPSS
cremas-para-la-piel.es Cross Site Scripting vulnerability OBB-3741655
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...
6.1AI Score
5.5CVSS
6.1AI Score
0.0005EPSS
6.5AI Score
0.124EPSS
7.5CVSS
6.4AI Score
EPSS
Ransomware in 2023 recap: 5 key takeaways
This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. In this report, “known attacks” are those where the victim did not pay a ransom. This provides the best overall picture of...
7.3AI Score
CISA: Disconnect vulnerable Ivanti products TODAY
In an emergency directive, the Cybersecurity and Infrastructure Security Agency (CISA) has ordered all federal agencies to disconnect all instances of Ivanti Connect Secure and Policy Secure solution products from agency networks no later than 11:59PM on Friday February 2, 2024. Besides the Ivanti....
9.1CVSS
7.3AI Score
0.969EPSS
7.8CVSS
7.7AI Score
0.001EPSS
6.3CVSS
7.5AI Score
0.002EPSS
9.8CVSS
7.8AI Score
0.971EPSS
Facebook fatal accident scam still rages on
Recently I wrote about a malvertising campaign on Facebook that has been going on for almost a year. Apparently Facebook is struggling to stop this campaign, so now this type of campaign is showing up in other languages than English. I have seen two different types in German. First Facebook...
7.3AI Score
Hello everyone! It has been 3 months since the last episode. I spent most of this time improving my Vulristics project. So in this episode, let's take a look at what's been done. Alternative video link (for Russia): https://vk.com/video-149273431_456239139 Also, let's take a look at the Microsoft.....
10CVSS
10AI Score
0.973EPSS
7.6AI Score
0.124EPSS
5.3CVSS
5.8AI Score
0.002EPSS
6.9AI Score
0.973EPSS
6.6AI Score
0.334EPSS
Spyware isn’t going anywhere, and neither are its tactics
Private and public efforts to curb the use of spyware and activity of other "mercenary" groups have heated up over the past week, with the U.S. government taking additional action against spyware users and some of the world's largest tech companies calling out international governments to do more.....
8.8CVSS
6.8AI Score
0.961EPSS
Oracle Linux 5 : xen (ELSA-2012-1130)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1130 advisory. The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of...
6.1AI Score
0.001EPSS
Astaroth, Mekotio & Ousaban abusing Google Cloud Run in LATAM-focused malware campaigns
Google Cloud Run is currently being abused in high-volume malware distribution campaigns, spreading several banking trojans such as Astaroth (aka Guildma), Mekotio and Ousaban to targets across Latin America and Europe. The volume of emails associated with these campaigns has significantly...
7AI Score
9.8CVSS
9AI Score
0.964EPSS
This module will attempt to test remote Git access using (.ssh/id_* private keys). This works against GitHub and GitLab by default, but can easily be extended to support more server...
7.3AI Score
9.8CVSS
7.8AI Score
0.217EPSS
7.7AI Score
0.029EPSS
7.8CVSS
8.9AI Score
0.002EPSS
9.8CVSS
8.2AI Score
0.971EPSS
7.6AI Score
0.07EPSS
7.8CVSS
7.6AI Score
0.021EPSS
7.8CVSS
7.8AI Score
0.016EPSS
6.4AI Score
0.017EPSS
7.8CVSS
7.7AI Score
0.011EPSS
9.8CVSS
9.1AI Score
0.964EPSS
5.5CVSS
5.9AI Score
0.001EPSS
6.5AI Score
0.041EPSS
8.8CVSS
7.1AI Score
0.003EPSS
AlmaLinux 8 : glibc (ALSA-2023:5455)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5455 advisory. A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode...
7.8CVSS
8AI Score
0.014EPSS
7.8CVSS
7.6AI Score
0.154EPSS
9.8CVSS
8.2AI Score
0.971EPSS
7.8CVSS
7.8AI Score
0.016EPSS
6.5AI Score
0.062EPSS