Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Digital security is getting stronger, so criminals and law enforcement alike may be more willing to physically take your laptop or storage device to gain acces…
REMnux is a free community distribution that ethical hackers, security researchers, and many other security pros can leverage to build their own labs and speed…
This update provides ffmpeg version 4.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream. References: - https://bug…
An unauthenticated remote host could send an invalid ClientHello message in which the declared length of the cookie extends past the end of the message. A DTLS…
It was discovered that there was a potential out-of-bounds write vulnerability in pixman, a pixel-manipulation library used in many Linux graphical application…
It was discovered that scciclient did not verify server TLS certificates when making requests. For Debian 10 buster, this problem has been fixed in version
Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted ht…
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Yuchen Zeng and Eduardo Vela discovered a buffer overflow in NTFS-3G, a read-write NTFS driver for FUSE, due to incorrect validation of some of the NTFS metada…
Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948) * Archive_Tar: improper filename sanitization …
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
**PHP version 8.0.25** (27 Oct 2022) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**) (cmb…
Nicky Mouha discovered a buffer overflow in '_sha3', the SHA-3 hashing function module used by 'hashlib' in Python 3.7. While the attacks require a large volum…
A buffer overflow in zlib might allow an attacker to cause remote code execution.
Multiple vulnerabilities have been discovered in the Xorg Server and XWayland, the worst of which can result in remote code execution.
- url: use IDN decoded names for HSTS checks (CVE-2022-42916) - http_proxy: restore the protocol pointer on error (CVE-2022-42915) - netrc: replace fgets with …
A heap use-after-free vulnerability after overeager destruction of a shared DTD in the XML_ExternalEntityParserCreate function in Expat, an XML parsing C libra…
Heads up, Android users! Researchers have discovered another bunch of malicious Android apps on the…New Wave Of Malicious Android Apps Garnered 20M+ Downloads …
The OpenSSL Project team has announced that, on November 1, 2022, they will release OpenSSL version 3.0.7, which will fix a critical vulnerability in the popul…
Several security vulnerabilities have been discovered in Wordpress, a popular content management framework. Possible SQL injection and cross-site scripting (XS…
This update includes the changes in tzdata 2022e. Notable changes are: - - Syria and Jordan are abandoning the DST regime and are changing to
A now-patched vulnerability in VMware Workspace ONE Access has been observed being exploited to deliver both cryptocurrency miners and ransomware on affected m…
If you've thought about becoming a professional Linux administrator but you're not sure where to start, this article is for you.
ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. (CVE-2021-46790) An invalid return code in fuse_kern_mount enabl…
