ZDI-23-1580: (0Day) Microsoft Exchange DownloadDataFromOfficeMarketPlace Server-Side Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The ZDI has...
ZDI-23-1581: (0Day) Microsoft Exchange CreateAttachmentFromUri Server-Side Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The ZDI has...
netconsd-0.4-1.el8
FEDORA-EPEL-2023-fa5dc9aea1 Packages in this update: netconsd-0.4-1.el8 Update description: Update to 0.4 Read More
netconsd-0.4-1.el9
FEDORA-EPEL-2023-65b354a7bf Packages in this update: netconsd-0.4-1.el9 Update description: Update to 0.4 Read More
netconsd-0.4-1.fc37
FEDORA-2023-ebbe7e9887 Packages in this update: netconsd-0.4-1.fc37 Update description: Update to 0.4 Read More
USN-6468-1: Thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could...
Smashing Security podcast #346: How hackers are breaching Booking.com, and the untrustworthy reviews
Workers wonder if their colleagues are actually AI, and we take a deeper look into the curious scams going on via Booking.com. All this and...
DSA-5545-1 vlc – security update
An out-of-bounds write was discovered in the MMS demuxer of the VLC media player. https://security-tracker.debian.org/tracker/DSA-5545-1 Read More
DSA-5546-1 chromium – security update
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. https://security-tracker.debian.org/tracker/DSA-5546-1 Read More
DSA-5546 chromium – security update
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. Read More