Month: abril 2019

https://blogvault.net/top-reasons-to-backup-your-wordpress-site-right-away/The post Top Reasons to Backup Your WordPress Site Right Away! appeared first on BlogVault – The Most Reliable WordPress Management Service. More info: https://blogvault.net/top-reasons-to-backup-your-wordpress-site-right-away/

https://wpvulndb.com/vulnerabilities/9246 More info: https://wpvulndb.com/vulnerabilities/9246

http://feedproxy.google.com/~r/sucuri/blog/~3/avh-kPo06UA/malware-campaigns-sharing-network-resources-r00ts-ninja.html We recently noticed an interesting example of network infrastructure resources being used over a period of time by more than one large scale malware campaign (e.g redirected traffic, cryptomining). This was discovered when reviewing sources of the various malicious domains used in a recent WordPress plugin exploit wave. Mass Infection of WordPress Websites The […] More info: http://feedproxy.google.com/~r/sucuri/blog/~3/avh-kPo06UA/malware-campaigns-sharing-network-resources-r00ts-ninja.html

More info: https://wpvulndb.com/vulnerabilities/9247

PolicyKit vulnerability CVE-2019-6133 Security Advisory Security Advisory Description In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not ... More info: https://support.f5.com/csp/article/K22715344

Linux kernel vulnerability CVE-2018-19824 Security Advisory Security Advisory Description In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by ... More info: https://support.f5.com/csp/article/K98155950

Fabien Potencier discovered that twig, a template engine for PHP, didnot correctly enforce sandboxing. This could result in potentialinformation disclosure. More info: https://www.debian.org/security/2019/dsa-4419

A vulnerability was discovered in the Dovecot email server. When readingFTS or POP3-UIDL headers from the Dovecot index, the input buffer sizeis not bounds-checked. An attacker with the ability to modify dovecotindexes, can take advantage of this flaw for privilege escalation or theexecution of arbitrary code with the permissions of the dovecot user.Only installations using the FTS or pop3 migration plugins are affected. More info: https://www.debian.org/security/2019/dsa-4418

Multiple security issues have been found in the Thunderbird mail client,which could lead to the execution of arbitrary code or denial of service. More info: https://www.debian.org/security/2019/dsa-4420