Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on May 18

SEC Consult Vulnerability Lab Security Advisory < 20220518-0 >
=======================================================================
title: Multiple Critical Vulnerabilities
product: SAP® Application Server
ABAP and ABAP® Platform (Different Software Components)
vulnerable version: see section “Vulnerable / tested versions”
fixed version: see SAP security notes…

Read More

Posted by Rodolfo Augusto do Nascimento Tavares via Fulldisclosure on May 18

=====[ Tempest Security Intelligence – ADV-03/2022
]==========================

PHPIPAM – Version 1.4.4

Author: Rodolfo Tavares

Tempest Security Intelligence – Recife, Pernambuco – Brazil

=====[ Table of Contents ]==================================================

* Overview
* Detailed description
* Timeline of disclosure
* Thanks & Acknowledgements
* References

=====[ Vulnerability Information…

Read More

Posted by Rodolfo Augusto do Nascimento Tavares via Fulldisclosure on May 18

=====[ Tempest Security Intelligence – ADV-12/2021
]==========================

LiquidFiles – 3.4.15

Author: Rodolfo Tavares

Tempest Security Intelligence – Recife, Pernambuco – Brazil

=====[ Table of Contents]==================================================
* Overview
* Detailed description
* Timeline of disclosure
* Thanks & Acknowledgements
* References

=====[ Vulnerability…

Read More

Posted by malvuln on May 18

Watch multiple LockBit Ransom get DESTROYED Mass PWNAGE at scale!

https://www.youtube.com/watch?v=eg3l8a_HSSU

Read More

Posted by malvuln on May 18

Reference list for my Ransomware exploitation research. Lists current DLLs
I have seen to date that some ransomware search for, which I have used
successfully to hijack and intercept vulnerable strains executing arbitrary
code pre-encryption.

https://github.com/malvuln/RansomDLLs

Read More

FEDORA-2022-bd4457bcc4

Packages in this update:

moodle-3.11.7-1.fc34

Update description:

Multiple CVE fixes.

Read More

FEDORA-2022-530fdc5202

Packages in this update:

moodle-3.11.7-1.fc35

Update description:

Multiple CVE fixes.

Read More

FEDORA-2022-89bfefbe48

Packages in this update:

moodle-3.11.7-1.fc36

Update description:

Multiple CVE fixes.

Read More

It was discovered that GNOME Settings incorrectly handled the remote
desktop sharing configuration. When turning off desktop sharing, it may be
turned on again after rebooting, contrary to expectations.

Read More

There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.

Read More