Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
389-ds-base: sending crafted message could result in DoS (CVE-2022-0918) * 389-ds-base: expired password was still allowed to access the database (CVE-2022-099…
python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py (CVE-2019-20916) For more details about the security issue(s)…
It was discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary commands.
Everyone has their priorities and opinions regarding choosing the perfect Operating System. End-users may not…Data Security – What Is the Most Secure OS? on La…
https://www.mediawiki.org/wiki/Release_notes/1.37#MediaWiki_1.37.2
Update to 42.3 - main: Hotfix to workaround gtk #4880 (affects Save As dialogs on X11 primarily) - config: Add GNOME 42+ compatibility for dark mode, and fetch…
Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalatio…
Technology is developing and advancing tremendously. New inventions are delivered to the market every year and all of these improve the entire domain a lot. Bu…
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege …
It was discovered that exo, a support library for the Xfce desktop environment, would allow executing remote .desktop files. In some scenario, an attacker coul…
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to c…
Update to 2.36.3: * Support capturing already encoded video streams, which takes advantage of encoding done in hardware by devices which support this feature. …
Windows and Linux systems are being targeted by a ransomware variant called HelloXD, with the infections also involving the deployment of a backdoor to facilit…
This fixes several issues, most notably BZ#1955416 and CVE-2022-28737. Please test.
This fixes several issues, most notably BZ#1955416 and CVE-2022-28737. Please test.
This fixes several issues, most notably BZ#1955416 and CVE-2022-28737. Please test.
crypto/tls: session tickets lack random ticket_age_add. Session tickets generated by crypto/tls did not contain a randomly generated ticket_age_add. This allow…
gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and…
Protect your Facebook Password Found this one while I was on Safari. Its a pretty…Facebook Account Bruteforcer on Latest Hacking News
cSploit is now considered EOL and is not being updated by the developers. Current version…cSploit - A Network Analyzer on Android on Latest Hacking News
This article will explore the key benefits and potential drawbacks of open source security in under a minute.
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege …
python-twisted: possible http request smuggling (CVE-2022-24801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgme…
It was discovered that the Debian package of Avahi, a framework for Multicast DNS Service Discovery, executed the script avahi-daemon-check-dns.sh with root pr…
