TheNewbie

Lockbit ransomware is back!?! Says US Elections caused the takedown, blames PHP bug for fall

by

Lockbit page on ransomlook.io: https://www.ransomlook.io/group/lockbit3 Message: https://samples.vx-underground.org/tmp/Lockbit_Statement_2024-02-24.txt Source: https://twitter.com/vxunderground Take the message below with a grain of salt. This is just that, a message, on the internet. No proof for anything —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 What happened. On February 19, 2024 penetration testing of two of my servers took place, at 06:39 UTC … Read more

[Video] How bad is the IT Job Market in 2023 + a few tips to improve your CV for cybersecurity jobs

by

Reddit thread: https://www.reddit.com/r/programare/comments/17u9vx8/numi_gasesc_job_de_4_luni_pareri_cv/ Resources to improve your CV: Practice in TryHackMe https://tryhackme.com/ Do Bug Bounty and GET IN THE HALL OF FAME of multiple companies. Money is also good but you need to get recognized to get hired. Automate parts of the process and publish your tools. https://hackerone.com/bug-bounty-programs https://www.bugcrowd.com/ https://www.intigriti.com/ https://yeswehack.com/ https://www.openbugbounty.org/ https://immunefi.com/ https://chaos.projectdiscovery.io https://github.com/arkadiyt/bounty-targets-data … Read more

[Video] “Introduction to Cryptography” Writeup – Tryhackme “Security Engineer” Learning path

by

Task 1 Introduction The purpose of this room is to introduce users to basic cryptography concepts such as: Symmetric encryption, such as AES Asymmetric encryption, such as RSA Diffie-Hellman Key Exchange Hashing PKI Suppose you want to send a message that no one can understand except the intended recipient. How would you do that? One … Read more

[Video] “ Security Principles” Writeup – Tryhackme “Security Engineer” Learning path

by

Task 1 Introduction Security has become a buzzword; every company wants to claim its product or service is secure. But is it? Before we start discussing the different security principles, it is vital to know the adversary against whom we are protecting our assets. Are you trying to stop a toddler from accessing your laptop? … Read more

[Video] “Security Engineer Intro” Writeup – Tryhackme “Security Engineer” Learning path

by

Security engineers form the backbone of an enterprise’s cyber security posture. In this room, we will get an introduction to the security engineer role and learn the day-to-day activities of a security engineer. It is highly recommended that before continuing on this room, you have completed the Pre Security path. Learning Objectives Why does the … Read more

TryHackMe introduces the “Security Engineer” Learning Path

by

TryHackMe introduced a new learning path called “Security Engineer”.It can be found here: https://tryhackme.com/path/outline/security-engineer-training I recorded a video about it, you can watch it below. To celebrate this, TryHackMe is running a Win Prizes and Learn campaign, details here. You can win prizes of up to $20,000. Good luck!

[Video] ‘Trooper’ Writeup – Tryhackme

by

Task 1 Who’s The Threat? A multinational technology company has been the target of several cyber attacks in the past few months. The attackers have been successful in stealing sensitive intellectual property and causing disruptions to the company’s operations. A threat advisory report about similar attacks has been shared, and as a CTI analyst, your … Read more

ESB-2023.3913 – [SUSE] Linux Kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3913 Security update for the Linux Kernel 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35824 CVE-2023-3358 CVE-2023-3268 CVE-2023-3161 CVE-2023-3159 CVE-2023-3141 CVE-2023-3111 CVE-2023-3090 CVE-2023-2002 CVE-2023-1637 CVE-2023-1249 CVE-2023-1079 CVE-2023-1077 Original Bulletin: … Read more

ESB-2023.3912 – [SUSE] Linux Kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3912 Security update for the Linux Kernel 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35829 CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33952 CVE-2023-33951 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30772 CVE-2023-30456 CVE-2023-28866 CVE-2023-28466 CVE-2023-28464 … Read more

ESB-2023.0654.2 – UPDATE [Appliance] F5 BIG-IP and BIG-IQ Products: CVSS (Max): 4.9 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.0654.2 K83284425: iControl REST and tmsh vulnerability CVE-2023-22326 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: F5 BIG-IP (all modules) F5 BIG-IQ Centralized Management Publisher: F5 Networks Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-22326 Original Bulletin: https://my.f5.com/manage/s/article/K83284425 Revision History: … Read more

ESB-2023.3927 – [RedHat] nodejs:16: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3927 nodejs:16 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs:16 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4033 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat … Read more

ESB-2023.3926 – [RedHat] python38:3.8 and python38-devel:3.8: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3926 python38:3.8 and python38-devel:3.8 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python38:3.8 and python38-devel:3.8 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24329 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4032 Comment: CVSS (Max): 7.5 CVE-2023-24329 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) CVSS Source: Red … Read more

ESB-2023.3925 – [RedHat] grafana: CVSS (Max): 9.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3925 grafana security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: grafana Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-3128 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4030 Comment: CVSS (Max): 9.4 CVE-2023-3128 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L – … Read more

ESB-2023.3922 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3922 USN-6224-1: Linux kernel vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-2176 CVE-2023-2124 Original Bulletin: https://ubuntu.com/security/notices/USN-6224-1 Comment: CVSS (Max): 7.8 CVE-2023-2176 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – … Read more

ESB-2023.3921 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3921 USN-6223-1: Linux kernel (Azure CVM) vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-25012 CVE-2023-2985 CVE-2023-1998 CVE-2023-1859 CVE-2023-1670 CVE-2023-1079 CVE-2023-1077 CVE-2023-1076 Original Bulletin: https://ubuntu.com/security/notices/USN-6223-1 Comment: CVSS (Max): … Read more

ESB-2023.3920 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3920 USN-6222-1: Linux kernel (Xilinx ZynqMP) vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-32269 CVE-2023-32233 CVE-2023-31436 CVE-2023-30456 CVE-2023-26545 CVE-2023-25012 CVE-2023-3161 CVE-2023-2985 CVE-2023-2612 CVE-2023-2162 CVE-2023-1998 CVE-2023-1859 CVE-2023-1829 CVE-2023-1670 CVE-2023-1513 … Read more

ESB-2023.3919 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3919 USN-6221-1: Linux kernel vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-3111 CVE-2023-1990 CVE-2022-29901 CVE-2022-26373 CVE-2022-1184 CVE-2021-20321 CVE-2021-3753 Original Bulletin: https://ubuntu.com/security/notices/USN-6221-1 Comment: CVSS (Max): 7.8 CVE-2023-3111 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS … Read more

ESB-2023.3918 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3918 USN-6220-1: Linux kernel vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6220-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3917 – [Ubuntu] Ruby: CVSS (Max): 5.3 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3917 USN-6219-1: Ruby vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Ruby Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-36617 CVE-2023-28755 Original Bulletin: https://ubuntu.com/security/notices/USN-6219-1 Comment: CVSS (Max): 5.3 CVE-2023-36617 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L – ————————–BEGIN INCLUDED … Read more

ESB-2023.3916 – [Ubuntu] Firefox: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3916 USN-6218-1: Firefox vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-3600 Original Bulletin: https://ubuntu.com/security/notices/USN-6218-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– USN-6218-1: Firefox vulnerability 12 … Read more

ESB-2023.3915 – [Ubuntu] lib3mf: CVSS (Max): 8.1 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3915 USN-6216-1: lib3mf vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: lib3mf Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2021-21772 Original Bulletin: https://ubuntu.com/security/notices/USN-6216-1 Comment: CVSS (Max): 8.1 CVE-2021-21772 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3914 – [SUSE] Linux Kernel: CVSS (Max): 8.2 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3914 Security update for the Linux Kernel 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35829 CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33952 CVE-2023-33951 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30772 CVE-2023-30456 CVE-2023-28866 CVE-2023-28466 CVE-2023-28464 … Read more

ESB-2023.3950 – [SUSE] libqt5-qtbase: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3950 Security update for libqt5-qtbase 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libqt5-qtbase Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-32763 CVE-2020-24741 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232816-1 Comment: CVSS (Max): 7.8 CVE-2023-32763 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3949 – [SUSE] installation-images: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3949 Security update for installation-images 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: installation-images Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232815-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for installation-images Announcement ID: … Read more

ESB-2023.3948 – [SUSE] installation-images: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3948 Security update for installation-images 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: installation-images Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232819-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for installation-images Announcement ID: … Read more

ESB-2023.3947 – [SUSE] geoipupdate: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3947 Security update for geoipupdate 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: geoipupdate Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232812-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for geoipupdate Announcement ID: … Read more

ESB-2023.3946 – [Appliance] Honeywell Experion PKS, LX and PlantCruise: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3946 ICS Advisory | ICSA-23-194-06 Honeywell Experion PKS, LX and PlantCruise 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Honeywell Experion PKS, LX and PlantCruise Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-26597 CVE-2023-25948 CVE-2023-25770 CVE-2023-25178 CVE-2023-25078 CVE-2023-24480 … Read more

ESB-2023.3945 – [Appliance] Rockwell Automation PowerMonitor 1000: CVSS (Max): 8.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3945 ICS Advisory | ICSA-23-194-05 Rockwell Automation PowerMonitor 1000 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Rockwell Automation PowerMonitor 1000 Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-2072 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-194-05 Comment: CVSS (Max): 8.8 CVE-2023-2072 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) … Read more

ESB-2023.3944 – [Appliance] Siemens SIMATIC MV500 Devices: CVSS (Max): 8.2 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3944 ICS Advisory | ICSA-23-194-04 Siemens SIMATIC MV500 Devices 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens SIMATIC MV500 Devices Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-0286 CVE-2023-0215 CVE-2022-42329 CVE-2022-42328 CVE-2022-32296 CVE-2022-21166 CVE-2022-21125 CVE-2022-21123 CVE-2022-4450 CVE-2022-4304 … Read more

ESB-2023.3943 – [Appliance] Siemens SiPass Integrated: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3943 ICS Advisory | ICSA-23-194-02 Siemens SiPass Integrated 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens SiPass Integrated Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2022-31810 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-194-02 Comment: CVSS (Max): 7.5 CVE-2022-31810 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: … Read more

ESB-2023.3942 – [Appliance] Siemens RUGGEDCOM ROX: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3942 ICS Advisory | ICSA-23-194-01 Siemens RUGGEDCOM ROX 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens RUGGEDCOM ROX Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-36755 CVE-2023-36754 CVE-2023-36753 CVE-2023-36752 CVE-2023-36751 CVE-2023-36750 CVE-2023-36749 CVE-2023-36748 CVE-2023-36390 CVE-2023-36389 CVE-2023-36386 CVE-2022-32207 … Read more

ESB-2023.3941 – [Appliance] Siemens SIMATIC CN 4100: CVSS (Max): 9.9 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3941 ICS Advisory | ICSA-22-194-03 Siemens SIMATIC CN 4100 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens SIMATIC CN 4100 Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-29131 CVE-2023-29130 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-22-194-03 Comment: CVSS (Max): 9.9 CVE-2023-29130 … Read more

ESB-2023.3940 – [Ubuntu] SciPy: CVSS (Max): 6.7 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3940 USN-6226-1: SciPy vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: SciPy Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-29824 CVE-2023-25399 Original Bulletin: https://ubuntu.com/security/notices/USN-6226-1 Comment: CVSS (Max): 6.7 CVE-2023-29824 (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD, [SUSE] Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3939 – [Ubuntu] Knot Resolver: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3939 USN-6225-1: Knot Resolver vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Knot Resolver Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2022-40188 Original Bulletin: https://ubuntu.com/security/notices/USN-6225-1 Comment: CVSS (Max): 7.5 CVE-2022-40188 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

ESB-2023.3938 – [Appliance] PAN-OS: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3938 CVE-2023-38046 PAN-OS: Read System Files and Resources During Configuration Commit 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: PAN-OS Publisher: Palo Alto Networks Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-38046 Original Bulletin: https://securityadvisories.paloaltonetworks.com/CVE-2023-38046 Comment: CVSS (Max): None available … Read more

ESB-2023.3937 – [Appliance] Rockwell Automation Select Communication Modules: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3937 ICS Advisory | ICSA-23-193-01 Rockwell Automation Select Communication Modules 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Rockwell Automation Select Communication Modules Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-3596 CVE-2023-3595 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-193-01 Comment: CVSS (Max): … Read more

ESB-2023.3936.2 – UPDATE [Cisco] Cisco SD-WAN vManage: CVSS (Max): 9.1 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3936.2 Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco SD-WAN vManage Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20214 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-unauthapi-sphCLYPA Comment: CVSS (Max): 9.1 CVE-2023-20214 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) CVSS … Read more

ESB-2023.3935 – [Debian] ruby-doorkeeper: CVSS (Max): 6.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3935 ruby-doorkeeper security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ruby-doorkeeper Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-34246 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00016.html Comment: CVSS (Max): 6.5 CVE-2023-34246 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N – ————————–BEGIN INCLUDED … Read more

ESB-2023.3934 – [Debian] thunderbird: CVSS (Max): 8.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3934 thunderbird security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: thunderbird Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html Comment: CVSS (Max): 8.8 CVE-2023-37211 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: … Read more

ESB-2023.3933 – [RedHat] rh-nodejs14-nodejs: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3933 rh-nodejs14-nodejs security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: rh-nodejs14-nodejs Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4039 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat … Read more

ESB-2023.3932 – [RedHat] python38:3.8 and python38-devel:3.8: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3932 python38:3.8 and python38-devel:3.8 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python38:3.8 and python38-devel:3.8 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24329 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4038 Comment: CVSS (Max): 7.5 CVE-2023-24329 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) CVSS Source: Red … Read more

ESB-2023.3931 – [RedHat] bind: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3931 bind9.16 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4037 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – … Read more

ESB-2023.3930 – nodejs: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3930 nodejs security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs Publisher: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4036 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

ESB-2023.3929 – [RedHat] nodejs:18: CVSS (Max): 8.6 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3929 nodejs:18 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs:18 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 CVE-2022-4904 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4035 Comment: CVSS (Max): 8.6 CVE-2022-4904 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) CVSS Source: Red … Read more

ESB-2023.3928 – [RedHat] nodejs:16: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3928 nodejs:16 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs:16 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4034 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat … Read more

ESB-2023.3970 – [RedHat] firefox: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3970 firefox security update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4070 Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red … Read more

ESB-2023.3969 – [RedHat] firefox: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3969 firefox security update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4069 Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red … Read more

ESB-2023.3968 – [RedHat] thunderbird: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3968 thunderbird security update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: thunderbird Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4068 Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red … Read more