USN-5852-1: OpenStack Swift vulnerability
It was discovered that OpenStack Swift incorrectly handled certain XML files. A remote authenticated user could possibly use this issue to obtain arbitrary file contents...
CVE-2021-42793
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any...
CVE-2021-42792
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any...
CVE-2021-41064
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any...
VMware ESXi server ransomware evolves, after recovery script released
The FBI and CISA have released a recovery script for the global ESXiArgs ransomware campaign targeting VMware ESXi servers, but the ransomware has since been...
openssl-3.0.8-1.fc36
FEDORA-2023-a5564c0a3f Packages in this update: openssl-3.0.8-1.fc36 Update description: Rebase to upstream version 3.0.8 Resolves: CVE-2022-4203 Resolves: CVE-2022-4304 Resolves: CVE-2022-4450 Resolves: CVE-2023-0215 Resolves: CVE-2023-0216 Resolves: CVE-2023-0217...
openssl-3.0.8-1.fc37
FEDORA-2023-57f33242bc Packages in this update: openssl-3.0.8-1.fc37 Update description: Rebase to upstream version 3.0.8 Resolves: CVE-2022-4203 Resolves: CVE-2022-4304 Resolves: CVE-2022-4450 Resolves: CVE-2023-0215 Resolves: CVE-2023-0216 Resolves: CVE-2023-0217...
#SOOCon23: Open Source Tools can Automate SBOM Requirements
Open source enterprise software users presented tools to automate SBOMs during the State of Open Con 23 conference in London Read More
UK/US cybercrime crackdown sees 7 ransomware criminals sanctioned
A UK/US campaign to tackle international cybercrime has seen Seven Russian cybercriminals linked to a notorious ransomware group exposed and sanctioned. The sanctions were announced...
HTML smuggling campaigns impersonate well-known brands to deliver malware
Trustwave SpiderLabs researchers have cited an increased prevalence of HTML smuggling activity whereby cybercriminal groups abuse the versatility of HTML in combination with social engineering...