Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
2 New Chrome 0-Days Under Attack ' Update Your Browser ASAP!
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with fixes for two security vulnerabilities, both of which…
Mageia 2021-0186: curl security upda
libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and th…
Malware Can Exploit New Flaw in Intel CPUs to Launch Side-Channel Attacks
A new research has yielded yet another means to pilfer sensitive data by exploiting what's the first "on-chip, cross-core" side-channel attack targeting the ri…
RedHat: RHSA-2021-0837:01 Moderate: openvswitch2.11 security upda
An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secu…
Mageia 2021-0133: quartz security upda
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990…
Debian LTS: DLA-2386-1: libdbi-perl security upda
Several vulnerabilities were discovered in the Perl5 Database Interface (DBI). An attacker could trigger a denial-of-service (DoS) and possibly execute arbitra…
Ubuntu: USN-4517-1 Email-Address-List vulnerabili
Email-Address-List could be made to remotely exhaust resources if it received specially crafted email data.
Ubuntu 4496-1: Apache XML-RPC vulnerabili
Apache XML-RPC could be made to execute arbitrary code if it received specially crafted data by a malicious XML-RPC server.
Ubuntu 4495-1: Apache Log4j vulnerabili
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
Mageia 2020-0366: libetpan security upda
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server…
Serious Vulnerabilities Found In MAGMI Magento Plugin
Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMISerious…
Gentoo: GLSA-202008-23: chrony: Symlink vulnerabili
A vulnerability in chrony may allow a privileged attacker to cause data loss via a symlink.
Debian LTS: DLA-2341-1: inetutils security upda
In inetutils-telnetd, an implementation of a telnet daemon, arbitrary remote code execution might have been possible via short writes or urgent data.
Debian LTS: DLA-2340-1: sqlite3 security upda
Several vulnerabilities have been discovered in sqlite3, a C library that implements an SQL database engine. CVE-2018-8740
Mageia 2020-0338: freerdp security upda
Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and…
Mageia 2020-0335: x11-server security upda
Allocation for pixmap data in AllocatePixmap() does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X serv…
Mageia 2020-0328: firejail security upda
It was reported that firejail does not respect the end-of-options separator ("--"), allowing an attacker with control over the command line options of the sand…
Mageia 2020-0325: golang security upda
Servers where the Handler concurrently reads the request body and writes a response can encounter a data race and crash. The httputil.ReverseProxy Handler is a…
Flaws in Samsung Phones Exposed Android Users to Remote Attacks
New research disclosed a string of severe security vulnerabilities in the 'Find My Mobile''an Android app that comes pre-installed on most Samsung smartphones'…
A New vBulletin 0-Day RCE Vulnerability and Exploit Disclosed Publicly
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulne…
Researcher Demonstrates Several Zoom Vulnerabilities at DEF CON 28
Popular video conferencing app Zoom has addressed several security vulnerabilities, two of which affect its Linux client that could have allowed an attacker wi…
Mageia 2020-0311: virtualbox security upda
Multiple security vulnerabilites in virtualbox allow unauthorized access to critical data or takeover of Oracle VM VirtualBox. See CVE references for details. …
Industrial VPN Flaws Could Let Attackers Target Critical Infrastructures
Cybersecurity researchers have discovered critical vulnerabilities in industrial VPN implementations primarily used to provide remote access to operational tec…
Researchers Reveal New Security Flaw Affecting China's DJI Drones
Cybersecurity researchers on Thursday revealed security issues in the Android app developed by Chinese drone-maker Da Jiang Innovations (DJI) that comes with a…