Sudo Security Issue (CVE-2021-3156)

[V2] Last Updated: 2021/01/27 1:00PM PDTCVE Identifier: CVE-2021-3156 This is an update for this issue. AWS is aware of the security issue recently disclosed by the open source community affecting the Linux "sudo" utility (CVE-2021-3156). This issue may permit unprivileged users to run privileged commands, or cause affected hosts to crash. Updated versions of sudo are available in the Amazon Linux and Amazon Linux 2 package repositories. Customers with existing EC2 instances running More info: https://aws.amazon.com/security/security-bulletins/AWS-2021-001/

Phishing & Malspam with Leaf PHPMailer

It’s common knowledge that attackers often use email as a delivery mechanism for their malicious activity — which can range from enticing victims to click a phishing URL or download a malicious attachment. To support these activities, attackers seek out tools that assist in the mass sending of malspam (malicious spam) emails from a compromised […] More info: http://feedproxy.google.com/~r/sucuri/blog/~3/MnGE1GL6510/phishing-malspam-with-leaf-phpmailer.html

WordPress security & hardening, the definitive guide

WordPress is massively popular. Around every one in five sites on the Internet uses WordPress in some form. Be that to run a humble blog, or a multi-site Content Management System (CMS) or eCommerce site. As a result, it is no surprise that WordPress websites are a very popular target for both experienced hackers and […] More info: https://www.wpwhitesecurity.com/wordpress-security/

Sudo Security Issue (CVE-2021-3156)

Initial Publication Date: 2021/01/26 2:11PM PST CVE Identifier: CVE-2021-3156 AWS is aware of the security issue recently disclosed by the open source community affecting the Linux "sudo" utility (CVE-2021-3156). This issue may permit unprivileged users to run privileged commands. The sudo maintainers have published more information about this issue at https://www.sudo.ws/alerts/unescape_overflow.html. AWS infrastructure and services are not affected by this issue. As a general More info: https://aws.amazon.com/security/security-bulletins/AWS-2021-001/

Sudo Security Issue (CVE-2021-3156)

Initial Publication Date: 2021/01/26 2:11PM PST CVE Identifier: CVE-2021-3156 AWS is aware of the security issue recently disclosed by the open source community affecting the Linux "sudo" utility (CVE-2021-3156). This issue may permit unprivileged users to run privileged commands. The sudo maintainers have published more information about this issue at https://www.sudo.ws/alerts/unescape_overflow.html. AWS infrastructure and services are not not affected by this issue. As a general More info: https://aws.amazon.com/security/security-bulletins/AWS-2021-001/

Firefox 85 Cracks Down on Supercookies

Trackers and adtech companies have long abused browser features to follow people around the web. Since 2018, we have been dedicated to reducing the number of ways our users can … Read moreThe post Firefox 85 Cracks Down on Supercookies appeared first on Mozilla Security Blog. More info: https://blog.mozilla.org/security/2021/01/26/supercookie-protections/

QEMU vulnerability CVE-2017-15289

QEMU vulnerability CVE-2017-15289 Security Advisory Security Advisory Description The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a ... More info: https://support.f5.com/csp/article/K22572754?utm_source=f5support&utm_medium=RSS

Episode 101: Supporting Remote Students with Free Site Audits & Cleanings

Wordfence announces a new program offering free site cleaning and site audits to public schools in the United States. We talk about why we’re offering this program and how to help schools take advantage of it. We also talk about the growing prevalence of WordPress as a content management system and how the incoming administration […] More info: https://www.wordfence.com/blog/2021/01/episode-101-supporting-remote-students-with-free-site-audits-cleanings/

MSA-21-0001: Search input template insufficiently escaped search queries

by Michael Hawkins. Some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.Severity/Risk:SeriousVersions affected:3.10Versions fixed:3.10.1Reported by:kstptCVE identifier:CVE-2021-20183Changes (master):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-70571Tracker issue:MDL-70571 Search input template insufficiently escaped search queries More info: https://moodle.org/mod/forum/discuss.php?d=417166&parent=1680837

MSA-21-0002: Grade information disclosure in grades external fetch functions

by Michael Hawkins. Insufficient capability checks in some grade related web services meant students were able to view other students grades.Severity/Risk:MinorVersions affected:3.10, 3.9 to 3.9.3, 3.8 to 3.8.6Versions fixed:3.10.1, 3.9.4 and 3.8.7Reported by:Juan Segarra MontesinosCVE identifier:CVE-2021-20184Changes (master):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69797Tracker issue:MDL-69797 Grade information disclosure in grades external fetch More info: https://moodle.org/mod/forum/discuss.php?d=417167&parent=1680839
Translate »