Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue has been found in mod-wsgi, a Python WSGI adapter module for Apache. A request from an untrusted proxy does not remove the X-Client-IP header and thus…
Researchers discovered a severe blind SSRF vulnerability in WordPress that could allow DDoS attacks. Notably,…Six-Year-Old Blind SSRF Vulnerability Risks WordP…
Is your favorite Linux desktop Cinnamon, MATE, or Xfce? Or you are hankering for a change to something different and potentially better?
As IT workers continue their daunting job of protecting network users from bad guys, a few new tools might help stem the tide of vulnerabilities that continue …
A checksum is a small-sized block of data that is used to identify faults in files introduced during transmission or storage. Checksums are frequently used to …
Let's take a brief look at what Guillaume Fournier from Datadog presented at Blackhat USA 2022: ''One of the fastest growing subsystems in the Linux Kernel is,…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
Businesses currently utilize online services/technologies for different reasons. Such services are not always secure as…External Attack Surface Management Expl…
Nick Wellnhofer discovered that the xsltApplyTemplates function in libxslt, an XSLT processing runtime library, is prone to a use-after-free flaw, resulting in…
A vulnerability was discovered in open-vm-tools, an open source implementation of VMware Tools, allowing an unprivileged local guest user to escalate their pri…
Cybersecurity is a hot topic for any organization worldwide, as ransomware attacks continue to target…Take part in this 2022 Ransomware Survey & Win a 4K Samsu…
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
lsi53c895a: Do not abort when DMA requested and no data queued (#552) lsi53c895a: Fix use-after-free in lsi_do_msgout (CVE-2022-0216) (rhbz#2070902)
Yu Zhang and Nanyu Zhong discovered several vulnerabilities in net-snmp, a suite of Simple Network Management Protocol applications, which could result in deni…
Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape).
A researcher noticed Facebook tracking users’ activities on iOS devices when using the in-app browser…Research Finds Facebook Tracks In-App Browser Activities …
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
Multiple vulnerabilities have been discovered in Xen, the worst of which could result in remote code execution (guest sandbox escape).
Rebase gnutls to version 3.7.7 notes=Security fix for CVE-2022-2509
Multiple vulnerabilities have been discovered in Apache Webserver, the worst of which could result in remote code execution.
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial o…
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. (CVE-2022-29970) References: - https://bugs.mageia.…
KDE developers have started the month of August to a lot of fixes and polishing for the Plasma desktop.
Multiple vulnerabilities have been found in Spice Server, the worst of which may result in the remote execution of arbitrary code.
