CWE-690 – Unchecked Return Value to NULL Pointer Dereference
Description The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which...
USN-5402-2: OpenSSL vulnerabilities
USN-5402-1 fixed several vulnerabilities in OpenSSL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Elison Niven discovered that OpenSSL incorrectly...
[R1] Nessus Version 10.2.0 Fixes Multiple Third-Party Vulnerabilities
[R1] Nessus Version 10.2.0 Fixes Multiple Third-Party Vulnerabilities Arnie Cabral Thu, 05/26/2022 - 09:30 Nessus leverages third-party software to help provide underlying functionality. Several of...
CVE-2021-40317
Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter. Read More
Malware-Infested Smart Card Reader
Brian Krebs has an interesting story of a smart ID card reader with a malware-infested Windows driver, and US government employees who inadvertently buy and...
USN-5447-1: logrotate vulnerability
It was discovered that logrotate incorrectly handled the state file. A local attacker could possibly use this issue to keep a lock on the state...
18 Oil and Gas Companies Take Cyber Resilience Pledge
Energy corporations agree to cooperate on cybersecurity amid surging attacks on the sector Read More
USN-5446-1: dpkg vulnerability
Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially crafted...
Mastercard expands cybersecurity, risk services with new attack simulation and assessment platform
Financial services giant Mastercard has announced the launch of a new attack simulation and assessment platform designed to help businesses and governments enhance their cybersecurity...
Multi-Continental Operation Leads to Arrest of Cybercrime Gang Leader
The 37-year-old man is alleged to have spearheaded major phishing campaigns and business email compromise schemes Read More