Month: noviembre 2018

http://feedproxy.google.com/~r/sucuri/blog/~3/MI_FooeWvVA/erealitatea-net-hack-corrupts-websites-with-wp-gdpr-compliance-plugin-vulnerability.html We have noticed a growing number of WordPress-based sites that have had their URL settings changed to hxxp://erealitatea[.]net. Further investigations show that the issue is related to a security vulnerability in the WP GDPR Compliance plugin for WordPress (with 100,000+ active installations). The new General Data Protection Regulation (GDPR) laws in More info: http://feedproxy.google.com/~r/sucuri/blog/~3/MI_FooeWvVA/erealitatea-net-hack-corrupts-websites-with-wp-gdpr-compliance-plugin-vulnerability.html

BIG-IP iControl and tmsh vulnerability CVE-2018-15325. Security Advisory. Security Advisory Description. In BIG-IP 14.0.0 ... More info: https://support.f5.com/csp/article/K77313277

https://www.wordfence.com/blog/2018/11/trends-following-vulnerability-in-wp-gdpr-compliance-plugin/Earlier this week the WP GDPR Compliance plugin was briefly removed from the WordPress.org repository after the discovery of critical security issues impacting its users. In yesterday’s post, we provided some details regarding these issues and illustrated their severity. In the hours since that post was published, our team has continued tracking the adversaries seeking […] More info: https://www.wordfence.com/blog/2018/11/trends-following-vulnerability-in-wp-gdpr-compliance-plugin/

PHP vulnerability CVE-2018-17082. Security Advisory. Security Advisory Description. The Apache2 component in PHP before ... More info: https://support.f5.com/csp/article/K89095152

PHP vulnerability CVE-2018-17082. Security Advisory. Security Advisory Description. The Apache2 component in PHP before ... More info: https://support.f5.com/csp/article/K89095152

Red Hat Enterprise Linux: An update for thunderbird is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-12389, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393 More info: http://rhn.redhat.com/errata/RHSA-2018-3531.html

https://wpvulndb.com/vulnerabilities/9145 More info: https://wpvulndb.com/vulnerabilities/9145

Red Hat Enterprise Linux: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6Supplementary.Red Hat Product Security has rated this update as having a security impact ofCritical. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-13785, CVE-2018-3136, CVE-2018-3139, CVE-2018-3149, CVE-2018-3169, CVE-2018-3180, CVE-2018-3183, More info: http://rhn.redhat.com/errata/RHSA-2018-3533.html

https://wpvulndb.com/vulnerabilities/9144 More info: https://wpvulndb.com/vulnerabilities/9144

Update November 9, 2018 – Release of VMware Security Advisory VMSA-2018-0027 Today, VMware has released the following new security advisory: VMSA-2018-0027 VMware ESXi, Workstation, and Fusion updates address uninitialized stack memory usage The advisory documents the remediation of the critical and important security vulnerabilities that were demonstrated in the GeekPwn2018 event. These issues affect ESXi, […]The post VMware and the GeekPwn2018 event – new VMware Security More info: https://blogs.vmware.com/security/2018/11/vmware-and-the-geekpwn2018-event.html