A vulnerability classified as critical was found in libgit2 up to 1.6.4/1.7.1. Affected by this vulnerability is the function git_index_add in the library src/libgit2/index.c. The manipulation leads to heap-based buffer overflow.
This vulnerability is…
A vulnerability classified as critical has been found in Google Chrome. Affected is an unknown function of the component Skia. The manipulation leads to heap-based buffer overflow.
This vulnerability is traded as CVE-2024-1283. It is possible to launc…
A vulnerability was found in Google Chrome. It has been rated as critical. This issue affects some unknown processing of the component Mojo. The manipulation leads to use after free.
The identification of this vulnerability is CVE-2024-1284. The attac…
Chinese state-backed hackers broke into a computer network that’s used by the Dutch armed forces by targeting Fortinet FortiGate devices.
“This [computer network] was used for unclassified research and development (R&D),” the Dutch Military Intelli…
JetBrains is alerting customers of a critical security flaw in its TeamCity On-Premises continuous integration and continuous deployment (CI/CD) software that could be exploited by threat actors to take over susceptible instances.
The vulnerability, tr…
A while ago I wanted to deploy a service using a OCI (docker/podman) container, and I noticed to me, what seemed like a possibly distributing trend. In the build file for a lot of the containers, the password is put there in plain text in …
Whats wrong with my exploit? I’m trying to attack a Linux machine using Kali. I cannot seem to get the meterpreter session started.
Let’s say that there’s a known digital signature issued by a trusted CA.
Normally, digital signatures need to be evaluated: checked if they are expired, revoked, if there’s a problem in the chain of trust. However, if these aspects are a g…
What are the privacy implications of using an MDM "work profile" on your own Android 14 device? First, an MDM app such as MaaS360 must create the work profile while running in the personal profile. During this phase, could the ap…
Can you suggest a relevant topic for a thesis in the specialty of software-secure infocommunications?
The topic could be related to cryptography, software vulnerability analysis, corporate security, VPN, network protocol analysis, or anyth…
