A vulnerability classified as critical was found in openEuler iSulad up to 2.0.18-13/2.1.4-2 on Linux. Affected by this vulnerability is an unknown functionality. The manipulation leads to time-of-check time-of-use.
This vulnerability is known as CVE-…
A vulnerability classified as critical has been found in openEuler aops-zeus up to 1.4.0 on Linux. Affected is an unknown function. The manipulation leads to os command injection.
This vulnerability is traded as CVE-2024-24899. It is possible to launc…
A vulnerability was found in openEuler A-Tune-Collector up to 1.3.0 on Linux. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to command injection.
The identification of this vulnerability is CVE-2024-…
A vulnerability was found in openEuler migration-tools up to 1.0.1 on Linux. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to os command injection.
This vulnerability was named CVE-2024-24892. The at…
A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations.
Dubbed GoFetch, the vulnerability relates to a microarchitectural side-channel attack that takes advantag…
A list of topics we covered in the week of March 18 to March 24 of 2024
A vulnerability was found in openEuler gala-gopher up to 1.0.2 on Linux. It has been classified as critical. This affects an unknown part. The manipulation leads to os command injection.
This vulnerability is uniquely identified as CVE-2024-24890. An …
Some service like Bitwarden use the password to encrypt part of your personal data, so that nobody except you can access it, and they archive this because the server only gets your password’s hash from your login prompt the server never kn…
Is Crow ( https://github.com/CrowCpp/Crow ) a secure HTTP C++ library to use? Consider that Crow could host an HTTP server behind an HTTPS proxy such as Apache2/nginx, so ignore whether Crow is not hosting a HTTP/HTTPS server.
Are there an…
The Iran-affiliated threat actor tracked as MuddyWater (aka Mango Sandstorm or TA450) has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management (RMM) solution called Atera.
The…
