The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
No payment for gang who infected Costa Rican government computer systems with ransomware
USN-5376-1 fixed vulnerabilities in Git. This update provides the corresponding
updates for Ubuntu 22.04 LTS.
Original advisory details:
俞晨东 discovered that Git incorrectly handled certain repository paths
in platforms with multiple users support. An attacker could possibly use
this issue to run arbitrary commands.
Life sentence for Californian who made child sexual abuse material and shared it online
Someone isn’t happy that Ukraine’s post office has issued stamps mocking the sunken Russian navy flagship.
freerdp-2.7.0-1.fc34
Update to 2.7.0.
Security fixes for CVE-2022-24882, CVE-2022-24883.
freerdp-2.7.0-1.fc35
Update to 2.7.0.
Security fixes for CVE-2022-24882, CVE-2022-24883.
freerdp-2.7.0-1.fc36
Update to 2.7.0.
Security fixes for CVE-2022-24882, CVE-2022-24883.
Tenable launches the 2022 Capture the Flag event for the security community, running from June 9-13.
Get ready to test your hacking skills, practice new ones and see how you measure up against others in the industry by joining this year’s annual Capture the Flag event. Each year, Tenable hosts its annual Capture the Flag events for the security community, giving security practitioners an opportunity to showcase their cybersecurity skills and talents in a fun and engaging game of capture the flag.
We’re proud to announce that this year’s annual Capture the Flag event will be held in June 2022! Whether you’re a seasoned pro who started your career with Nessus or a “newbie” to the security industry, we welcome you to compete for the chance to win prizes and bragging rights through a series of security-related challenges. You may complete these challenges solo or with a team.
Tenable team members, from zero-day research to vulnerability detection, have put their heads together to develop a broad and unique set of challenges to give competitors of diverse backgrounds a chance to have fun as you put your skills to the test. We’re excited to, once again, put together our very own CTF and see what this community can accomplish.
Register here to save your spot! You can register as an individual or a team of up to five participants. The event will run from Thursday, June 9, 2022 at 12:00 pm ET to Monday, June 13, 2021 at 12:00 pm ET. The competition will be run through the CTFd.io platform. Please use a valid email address when registering; it will be used for competition updates and prize distribution.
Earn points by competing in a variety of CTF challenges. Points available for challenges will increase as the difficulty of the challenges increase. Additionally, some challenges will grant fewer points over time or may decrease in point value if you use hints to solve them. Competitors will not be required to use Tenable products to participate in the competition but Nessus Essentials may be a useful tool for some challenges.
The top three teams or individuals will be awarded prizes. Only participants in the U.S. are eligible for monetary prizes. Winning participants outside of the U.S. will be recognized in the award ceremony and with a digital certificate or badge. You can find full contest terms here. Winning submissions will receive a single prize, whether a team or individual.
First place – $500 Amazon Gift Card
Second place – $300 Amazon Gift Card
Third place – $200 Amazon Gift Card
The top 100 teams will have the option to opt in and receive a limited edition 2022 Tenable CTF T-Shirt!
Note: Participants will also have a chance to win other prizes; more details will be available on the competition platform.
This is meant to be a friendly competition — please no spoilers! Be careful not to share any challenge solutions publicly until after the competition wrap-up and award ceremony on June 16, 2022. (Sign-up details for the Tenable CTF Debrief & Awards Ceremony webinar will be coming soon.)
If you have any questions, please contact ctf@tenable.com.
Don’t wait! Sign up now to secure your spot in the Tenable Capture the Flag:
