#CVE #Exim

In the discussion, some mention the lack of antivirus for #Linux. It seems to me that regular backups (and checking from deployment) are more important. Not to mention the updates.

https://www.exim.org/static/doc/security/CVE-2019-10149.txt

https://habr.com/en/post/455598/

#CVE

In #memory we can't trust!

https://RAMbleed.com

#Zoom #webcam possible #CVE

https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

#Linux #CVE #sudo

https://twitter.com/TheHackersNews/status/1183812855612596225

#security #CVE

CVE-2019-1347: When a #mouse over a file is enough to crash your system:

https://blog.tetrane.com/2019/11/12/pe-parser-crash.html (via)

#security #CVE #Windows

https://blog.lessonslearned.org/chain-of-fools/

#security #CVE

#Apple yesterday rolled out a bunch of updates for its devices, and in almost all updates a lot of different security holes have been fixed, so updates are highly recommended for installation.

https://support.apple.com/en-us/HT210919

https://support.apple.com/en-us/HT201222

#security #CVE #Linux #Grub

https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/

SECMON - Automation Tool For Infosec And Vulnerability Management

#vulnerabilities #cybersecurity #CVE #Infosec #SECMON

https://reconshell.com/secmon-automation-tool-for-infosec-and-vulnerability-management/

#security #CVE #proxy

A critical security vulnerability has been disclosed in HAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary to possibly smuggle HTTP requests, resulting in unauthorized access to sensitive data and execution of arbitrary commands, effectively opening the door to an array of attacks.

https://thehackernews.com/2021/09/haproxy-found-vulnerable-to-critical.html

#CVE #Windows

https://github.com/klinix5/InstallerFileTakeOver

For the new era - the new type of information's source!

Receive #CVE Trends from Twitter in one dashboard - https://cvetrends.com/

"CVE Trends gathers crowdsourced intel about CVEs from Twitter's filtered stream API and combines it with data from NIST's NVD and GitHub APIs."

#CVE

Patch Tuesday from Microsoft

Description: https://isc.sans.edu/forums/diary/Microsoft+April+2022+Patch+Tuesday/28542/

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24521
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26809
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24491
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24497

#security #CVE #GitLab

The most critical security issue GitLab patched has the maximum severity score (10 out of 10) and is being tracked as CVE-2023-7028. Successful exploitation does not require any interaction.

https://www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-zero-click-account-hijacking-vulnerability/

#Windows #Notepad #CVE

https://fixupx.com/LundukeJournal/status/2021682522665480385?s=20

#iOs #hack #CVE

https://thehackernews.com/2026/03/darksword-ios-exploit-kit-uses-6-flaws.html

#security #LLM #way

Researchers at JFrog analyzed 55 vulnerability reports regarding #SQLite that were recently published. Based on the data from these reports, MITRE assigned #CVE identifiers to all of the issues. Three issues were classified as critical, and Red Hat assigned the most dangerous vulnerability (CVE-2026-51302) a severity score of 10 out of 10 in its databases, while SUSE rated it 9.8 out of 10. A detailed analysis of the reported vulnerabilities revealed that 54 of the 55 vulnerabilities, including the one marked as critical, are fictitious and caused by hallucinations from the AI model:

https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/