Backport security fixes from [PR#145](https://github.com/libming/libming/pull/145) Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132
October 26, 2019
Emil Lerner, beched and d90pwn found a buffer underflow in php5-fpm, a Fast Process Manager for the PHP language, which can lead to remote code execution.
October 26, 2019
security update
October 25, 2019
Is AWS Liable in Capital One Breach?
October 25, 2019
Type: Vulnerability. NixOS Nix is prone to a local privilege-escalation vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. GNU Guix is prone to a local privilege-escalation vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Elasticsearch is prone to an information-disclosure vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Multiple VMware products are prone to a denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Cloud Foundry UAA is prone to an information-disclosure vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Istio is prone to a remote denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Qt QtBase module is prone to a denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. PHP is prone to a remote code-execution vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Cloud Foundry SMB Volume is prone to an information disclosure vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. OpenSSH is prone to an integer overflow vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. SLUB Event Registration Extension is prone to an arbitrary-file-upload vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. vBulletin is prone to a remote code-execution vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. PHP is prone to a heap-based buffer-overflow vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Nessus is prone to a denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Adobe Creative Cloud Desktop Application is prone to an unspecified security-bypass vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. vBulletin is prone to multiple SQL-injection vulnerabilities.
October 25, 2019
Type: Vulnerability. Dnsmasq is prone to a remote denial-of-service vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to a security-bypass vulnerability; fixes are available.
October 25, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to information-disclosure vulnerability; fixes are available.
October 25, 2019
U.N., UNICEF, Red Cross Under Ongoing Mobile Attack
October 25, 2019
News Wrap: Hotel Robot Hacks, FTC Stalkerware Crackdown
October 25, 2019
Firefox Privacy Protection makes website trackers visible
October 25, 2019
Ransomware, Mobile Malware Attacks to Surge in 2020
October 25, 2019
Keylogging data vampire pleads guilty to bleeding two companies
October 25, 2019
Phishers strike at mobile wellness app company
October 25, 2019
Reading Time: ~ 2 min. MedusaLocker Ransomware Spotted Worldwide While it’s still unclear how MedusaLocker is spreading, the victims have been confirmed around the world in just the last month. By starting with a preparation phase, this variant can ensure that local networking functionality is active and maintain access to network drives. After shutting down […]
October 25, 2019
DeepCode taps AI for code reviews
October 25, 2019
Reading Time: ~ 3 min. Certain types of cybercrime targets always make headlines. In this two-part series, we’ll get into a pretty serious one: your health, and why hackers are targeting the healthcare industry for profit. The Short Answer: Medical Data is Worth a Lot Stolen medical data is valuable, plain and simple. In a […]
October 24, 2019
Religious Website Data Exposed for Months
October 24, 2019
Type: Vulnerability. Golang Go is prone to a remote denial-of-service vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. file is prone to a heap-based buffer-overflow vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. Direct Mail Extension for TYPO3 is prone to an information-disclosure vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. F5 BIG-IQ Centralized Management is prone to a remote security-bypass vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. Multiple D-Link products are prone to a command-injection vulnerability.
October 24, 2019
Type: Vulnerability. ISC BIND is prone to a remote denial-of-service vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. Google Chrome is prone to multiple security vulnerabilities; fixes are available.
October 24, 2019
Type: Vulnerability. F5 BIG-IQ Centralized Management is prone to an HTML-injection vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. Linux kernel is prone to a local memory-corruption vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. Python is prone to a security-bypass vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. Multiple Dell EMC products are prone to a remote security-bypass vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. Juniper Junos is prone to a local information-disclosure vulnerability; fixes are available.
October 24, 2019
Type: Vulnerability. libxslt is prone to an arbitrary code-execution vulnerability; fixes are available.
October 24, 2019
Raccoon Malware Scavenges 100,000+ Devices to Steal Data
October 24, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
October 24, 2019
Risk Level: Very Low. Type: Trojan.
October 24, 2019
Cash App Twitter Giveaway a Haven for Stealing Money
October 24, 2019
Samsung Rolls Out Fix For Galaxy S10 Fingerprint Sensor Glitch
October 24, 2019
Facebook lays out plan to protect elections
How is the social network preparing to curtail the spread of misinformation as the election season heats up? The post Facebook lays out plan to protect elections appeared first on WeLiveSecurity
October 24, 2019
5 tips for better cybersecurity
October 24, 2019
Vulnerability in content distribution networks found by researchers
October 24, 2019
Robot Hotel says sorry about the buggy bedside bots
October 24, 2019
An update that fixes 13 vulnerabilities is now available.
October 24, 2019
An update that fixes one vulnerability is now available.
October 24, 2019
An update that fixes 16 vulnerabilities is now available.
October 24, 2019
Apple Removes 17 Malicious iOS Apps From App Store
October 24, 2019
IBM tears into Google’s ‘quantum supremacy’ claim
October 24, 2019
The 5.3.7 update contains a number of important fixes across the tree. The update also includes a fix for the [CVE-2019-17666](https://access.redhat.com/security/cve/CVE-2019-17666) security vulnerability regarding a buffer overflow in a Realtek wireless driver.
October 24, 2019
The 5.3.7 update contains a number of important fixes across the tree. The update also includes a fix for the [CVE-2019-17666](https://access.redhat.com/security/cve/CVE-2019-17666) security vulnerability regarding a buffer overflow in a Realtek wireless driver.
October 24, 2019
sudo: Privilege escalation via ‘Runas’ specification with ‘ALL’ keyword (CVE-2019-14287) SL7 x86_64 sudo-1.8.23-4.el7_7.1.x86_64.rpm sudo-debuginfo-1.8.23-4.el7_7.1.x86_64.rpm sudo-debuginfo-1.8.23-4.el7_7.1.i686.rpm sudo-devel-1.8.23-4.el7_7.1.i686.rpm sudo-devel-1.8.23-4.el7_7.1.x86_64.rpm – Scientific Linux Development Team
October 24, 2019
Tor blimey, Auntie! BBC launches dedicated dark web mirror site
October 24, 2019
An update is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 24, 2019
Stalker app maker Retina-X settles FTC charges
October 24, 2019
An update for sudo is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 24, 2019
An update for sudo is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 24, 2019
Tracking down the developer of Android adware affecting millions of users
ESET researchers discovered a year-long adware campaign on Google Play and tracked down its operator. The apps involved, installed eight million times, use several tricks for stealth and persistence. The post Tracking down the developer of Android adware affecting millions of users appeared first on WeLiveSecurity
October 24, 2019
An update is now available for Ansible Engine 2.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 24, 2019
An update is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 24, 2019
An update is now available for Ansible Engine 2.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 24, 2019
Type: Vulnerability. Ansible is prone to multiple information-disclosure vulnerabilities; fixes are available.
October 23, 2019
Type: Vulnerability. Google Chrome is prone to multiple security vulnerabilities; fixes are available.
October 23, 2019
Type: Vulnerability. Fortinet FortiOS is prone to an insufficient entropy vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. McAfee Endpoint Security is prone to a vulnerability that lets attackers inject and execute arbitrary code; fixes are available.
October 23, 2019
Type: Vulnerability. URL redirect extension for TYPO3 is prone to an SQL-injection vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Citrix NetScaler ADC and NetScaler Gateway are prone to an authentication-bypass vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Libexpat Expat is prone to a heap-based buffer-overflow vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Google Chrome is prone to multiple vulnerabilities; fixes are available.
October 23, 2019
Type: Vulnerability. Mozilla Firefox and Firefox ESR are prone to multiple security vulnerabilities; fixes are available.
October 23, 2019
Type: Vulnerability. Mozilla Firefox is prone to multiple security vulnerabilities; fixes are available.
October 23, 2019
Type: Vulnerability. Juniper Junos is prone to a local directory-traversal vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Mozilla Firefox ESR is prone to a memory-corruption vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. The Booking and Availability Management Tools module for Drupal is prone to an access-bypass vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. ISC BIND is prone to an authentication-bypass vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Schneider Electric ProClima is prone to multiple remote code-execution vulnerabilities; fixes are available.
October 23, 2019