Drupal 9.4.x < 9.4.3 Multiple Vulnerabilities

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.91, 9.3.x prior to 9.3.19 or 9.4.x prior to 9.4.3. It is, therefore, affected by multi ...

Continue Reading
Debian DSA-5189-1 : gsasl – security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5189 advisory. - GNU SASL libgsasl server-side read-out-of-bounds with malicious a ...

Continue Reading
Integrating JIRA to the Qualys Cloud Platform

This is the second in [a blog series]() on integrations to the Qualys Cloud Platform. This post looks at what are the requirements to build a successful integration and workarounds when some of the pi ...

Continue Reading
CosmicStrand: the discovery of a sophisticated UEFI firmware rootkit

![](https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/07/25084950/abstract_cosmic_strand-990x400.jpg) ## Introduction Rootkits are malware implants which burrow themselves in the ...

Continue Reading
Exploit for Vulnerability in Microsoft

# CVE-2022-26809-POC metasploit module for CVE-2022-26809 window...Read More ...

Continue Reading
Privilege Escalation

Zulip is vulnerable to Privilege Escalation. An attacker may exploit the vulnerability by sending a maliciously crafted API call that grants administrator privileges to a bot in control.Read More ...

Continue Reading
CVE-2018-25045

Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.Read More ...

Continue Reading
SUSE SLES12 Security Update : python-M2Crypto (SUSE-SU-2022:2527-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2527-1 advisory. - A flaw was found in all released versions of m2cry ...

Continue Reading

Back to Main

Subscribe for the latest news: