USN-8990-1: Sprockets vulnerability
It was discovered that Sprockets incorrectly handled certain specially crafted requests when the Sprockets server was used in production. A remote attacker could possibly use this...
Read moreIt was discovered that Sprockets incorrectly handled certain specially crafted requests when the Sprockets server was used in production. A remote attacker could possibly use this...
Read moreIt was discovered that Relax-and-Recover created a world-readable initrd when GRUB_RESCUE was enabled. A local attacker could possibly use this issue to obtain sensitive information.
Read moreIt was discovered that libuser did not properly validate the GECOS field when changing user information. A local attacker could possibly use this issue to corrupt...
Read moreDawid Golunski discovered that Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to pass...
Read moreIt was discovered that Net::EasyTCP used the built-in Perl rand() function to generate encryption keys when no strong randomization module was present. An attacker could possibly...
Read moreIt was discovered that jabberd2 allowed SASL ANONYMOUS authentication even when it was not enabled in the configuration. A remote attacker could possibly use this issue...
Read moreHelldivers 2 isn't slowing down any time soon, and according to Edwin's recent interview with Arrowhead CCO Johan Pilestedt, it'll continue to be Arrowhead's main priority...
Read moreWhile Steve Huffman and Alexis Ohanian have tried to downplay Aaron Swartz’s role in “founding” Reddit, he was still an instrumental part of the company’s early...
Read moreNY governor pointed to Kennedy's long-standing anti-vaccine work as spurring outbreaks.
Read moreResearch Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires...
Read moreThe openSUSE project has announced the release of openSUSE Leap 16.1. The release is notable for allowing both traditional installations and immutable images with transactional updates....
Read moreGoogle has cut ties with the company behind the botnet campaign.
Read more