Remote Code Execution

github.com/gitpod-io/gitpod is vulnerable to Remote Code Execution. The vulnerability exists due to cross-site WebSocket Hijacking because the Origin header is not restricted which allows an attacker ...

Continue Reading
Predictions for 2023 from Latest API Threat Research | API Security Newsletter

March has arrived and is roaring like a very confused lion, at least in the northern hemisphere. And much like in the wild, brood production is increasing. We've already seen some fruits of that labor ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to the Git ...

Continue Reading
(RHSA-2023:0759) Moderate: Red Hat Virtualization security and bug fix update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): ...

Continue Reading

CVSS3 - MEDIUM

Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities

## Summary IBM Security Directory Integrator has addressed several security issues in open source packages. Please apply the fix as detailed below. ## Vulnerability Details ** CVEID: **[CVE-2018-1270] ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Thunderbird vulnerabilities

## Releases * Ubuntu 22.10 * Ubuntu 22.04 LTS * Ubuntu 20.04 LTS * Ubuntu 18.04 LTS ## Packages * thunderbird - Mozilla Open Source mail and newsgroup client Multiple security issues were di ...

Continue Reading

CVSS3 - CRITICAL

Firefox regressions

## Releases * Ubuntu 20.04 LTS * Ubuntu 18.04 LTS ## Packages * firefox - Mozilla Open Source web browser USN-5816-1 fixed vulnerabilities in Firefox. The update introduced several minor regress ...

Continue Reading
Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered

[![EV Charging Station](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Two new security weaknesses discovered in several electri ...

Continue Reading

Back to Main

Subscribe for the latest news: