#securityvulnerability — Public Fediverse posts

Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root

https://fed.brid.gy/r/https://nerds.xyz/2026/04/copy-fail-linux-root-exploit/

via @dotnet : .NET 10.0.7 Out-of-Band Security Update

https://ift.tt/M4BdDGe
#dotnet #dotnet10 #dotnetcore #AspNetCore #DataProtection #SecurityUpdate #OutOfBand #OOB #CVE202640372 #SecurityVulnerability #Decryption #HMAC #Encryption #ReleaseNotes #Downloads #SD…

via @dotnet : .NET 10.0.7 Out-of-Band Security Update

https://ift.tt/M4BdDGe
#dotnet #dotnet10 #dotnetcore #AspNetCore #DataProtection #SecurityUpdate #OutOfBand #OOB #CVE202640372 #SecurityVulnerability #Decryption #HMAC #Encryption #ReleaseNotes #Downloads #SD…

via @dotnet : .NET 10.0.7 Out-of-Band Security Update

https://ift.tt/M4BdDGe
#dotnet #dotnet10 #dotnetcore #AspNetCore #DataProtection #SecurityUpdate #OutOfBand #OOB #CVE202640372 #SecurityVulnerability #Decryption #HMAC #Encryption #ReleaseNotes #Downloads #SD…

via @dotnet : .NET 10.0.7 Out-of-Band Security Update

https://ift.tt/M4BdDGe
#dotnet #dotnet10 #dotnetcore #AspNetCore #DataProtection #SecurityUpdate #OutOfBand #OOB #CVE202640372 #SecurityVulnerability #Decryption #HMAC #Encryption #ReleaseNotes #Downloads #SD…

via @dotnet : .NET 10.0.7 Out-of-Band Security Update

https://ift.tt/M4BdDGe
#dotnet #dotnet10 #dotnetcore #AspNetCore #DataProtection #SecurityUpdate #OutOfBand #OOB #CVE202640372 #SecurityVulnerability #Decryption #HMAC #Encryption #ReleaseNotes #Downloads #SD…

“ClawJacked” Vulnerability Allows Malicious Websites to Take Control of OpenClaw

https://www.privacyguides.org/news/2026/03/02/clawjacked-vulnerability-allows-malicious-websites-to-take-control-of-openclaw/

#Privacy #News #PrivacyGuides #AI #SecurityVulnerability

Notepad++’s New Update System is “Robust and Effectively Unexploitable”

https://www.privacyguides.org/news/2026/02/27/notepad-s-new-update-system-is-robust-and-effectively-unexploitable/

#Privacy #News #PrivacyGuides #SecurityVulnerability

[en] Serious security vulnerabilities in cloud-based password managers : #Bitwarden, #Lastpass, #Dashlane

The research team of Prof. Paterson found cryptographic technologies from the 90s. "We were surprised by the severity of the security vulnerabilities".

In most cases, the researchers were able to gain access to the passwords – and even make changes to them.

https://ethz.ch/en/news-and-events/eth-news/news/2026/02/password-managers-less-secure-than-promised.html

Aside from this research paper, recommended password managers often include #KeePassXC and/or #KeePassDX for Android or #KeePassium for iOS. Also, it's usually a good idea to store only accounts and passwords that are really necessary on the go, especially on mobile devices.

#password #passwordmanager #cloudbased #security #ictsecurity #securityvulnerability #ethz

[en] Serious security vulnerabilities in cloud-based password managers : #Bitwarden, #Lastpass, #Dashlane

The research team of Prof. Paterson found cryptographic technologies from the 90s. "We were surprised by the severity of the security vulnerabilities".

In most cases, the researchers were able to gain access to the passwords – and even make changes to them.

https://ethz.ch/en/news-and-events/eth-news/news/2026/02/password-managers-less-secure-than-promised.html

Aside from this research paper, recommended password managers often include #KeePassXC and/or #KeePassDX for Android or #KeePassium for iOS. Also, it's usually a good idea to store only accounts and passwords that are really necessary on the go, especially on mobile devices.

#password #passwordmanager #cloudbased #security #ictsecurity #securityvulnerability #ethz

Bluetooth Exploit Leaves Hundreds of Millions of Accessories Vulnerable to Full Takeover

https://www.privacyguides.org/news/2026/01/16/bluetooth-exploit-leaves-hundreds-of-millions-of-accessories-vulnerable-to-full-takeover/

#Privacy #News #PrivacyGuides #SecurityVulnerability

Trail of Bits Exposes Vulnerabilities in Agentic Browsers, Compares to Cross-Site Scripting

https://www.privacyguides.org/news/2026/01/16/trail-of-bits-exposes-vulnerabilities-in-agentic-browsers-compares-to-cross-site-scripting/

#Privacy #News #PrivacyGuides #AI #SecurityVulnerability

Smart toilet camera misleads customers on end-to-end-encryption

https://www.privacyguides.org/news/2025/12/04/smart-toilet-camera-misleads-customers-on-end-to-end-encryption/

#Privacy #News #PrivacyGuides #SecurityVulnerability

#nginx 1.29.1 (dev) has been released (#http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability) https://nginx.org/

#ApacheHTTPd 2.4.65 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.65 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.65 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.65 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.65 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.64 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.64 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.64 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

@oliweb ah bah voilà pourquoi je n'ai jamais fait confiance ni à #Google #GAFAM ni au mots de passe d'application

#Gmail #FailleSécurité #faille_sécurité #faille_de_sécurité #SecurityBreach #SecurityVulnerability

🚨Critical security vulnerability (CVSS 10.0) discovered in Pterodactyl Panel! Attackers can execute code without authentication. Game server admins must update to v1.11.11 immediately to prevent compromise.

#SecurityLand #CyberWatch #Cybersecurity #GameServers #Pterodactyl #SecurityVulnerability #CVSS

https://www.security.land/critical-security-flaw-discovered-in-pterodactyl-panel-immediate-action-required

Zero-Click Flaw in Microsoft Copilot Illustrates AI Agent, RAG Risks – Source: securityboulevard.com https://ciso2ciso.com/zero-click-flaw-in-microsoft-copilot-illustrates-ai-agent-rag-risks-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #securityvulnerability #ThreatIntelligence #CyberSecurityNews #SecurityAwareness #SecurityBoulevard #microsoftcopilot #AIagentsecurity #Identity&Access #NetworkSecurity #vulnerabilities #MobileSecurity #SocialFacebook #RAGAI

Critical security flaws discovered in VMware core products including vCenter Server and ESXi. Vulnerabilities could allow command execution and service disruption. Updates available now to protect your infrastructure.

#SecurityLand #CyberWatch #Broadcom #VMware #Vulnerability #PatchNow #SecurityVulnerability #Technology

Read More: https://www.security.land/multiple-security-vulnerabilities-discovered-in-vmware-products-including-vcenter-server-and-esxi/

ETH Zurich researchers discover new security vulnerability in Intel processors

https://ethz.ch/en/news-and-events/eth-news/news/2025/05/eth-zurich-researchers-discover-new-security-vulnerability-in-intel-processors.html

#HackerNews #ETHZurich #IntelProcessors #SecurityVulnerability #Cybersecurity #ResearchNews #TechNews

🚨 A severe SQL injection vulnerability (CVE-2025-46337) has been discovered in the ADOdb PostgreSQL driver. Developers using PHP + PostgreSQL must update to version 5.22.9 immediately to stay secure.

#SecurityLand #CyberWatch #SecurityVulnerability #CVE #ADOdb #PostgreSQL #PHP #SQLInjection

Read More: https://www.security.land/critical-sql-injection-vulnerability-found-in-adodb-postgresql-driver/

#libxml2 2.14.1 has been released (#Xmlsoft / #libxml / #XML / #ExtensibleMarkupLanguage / #CVE / #SecurityVulnerability) https://github.com/GNOME/libxml2

#libexpat 2.7.1 has been released (#Expat / #XML / #CVE / #SecurityVulnerability) https://libexpat.github.io/

Next.js Authorization Bypass Vulnerability Exposes Root-Level Pages https://cybersecuritynews.com/next-js-authorization-bypass-vulnerability/ #BestCybersecurityNews #SecurityVulnerability #ComputerSecurityNews #VulnerabilityNews #PatchUpdates #CyberNews #Nextjs

Dell Power Manager Vulnerability Let Attackers Execute Malicious Code https://cybersecuritynews.com/dell-power-manager-code-execution-vulnerability/ #ComputerVulnerabilityNews #LatestCybersecurityNews #MaliciousCodeExecution #SecurityVulnerability #CyberSecurityNews #VulnerabilityNews #DellPowerManager #vulnerability

Immunefi suspends TrustSec amid bug bounty dispute - Immunefi suspended Trust Security over accusations of manipulating issue... - https://cointelegraph.com/news/immunefi-suspends-trustsec-over-bounty-payment-dispute #securityvulnerability #trustsecurity #bountydispute #bugbounty #whitehats #immunefi #crypto #web3

Immunefi suspends TrustSec amid bug bounty dispute - Immunefi suspended Trust Security over accusations of manipulating issue... - https://cointelegraph.com/news/immunefi-suspends-trustsec-over-bounty-payment-dispute #securityvulnerability #trustsecurity #bountydispute #bugbounty #whitehats #immunefi #crypto #web3

Immunefi suspends TrustSec amid bug bounty dispute - Immunefi suspended Trust Security over accusations of manipulating issue... - https://cointelegraph.com/news/immunefi-suspends-trustsec-over-bounty-payment-dispute #securityvulnerability #trustsecurity #bountydispute #bugbounty #whitehats #immunefi #crypto #web3

Immunefi suspends TrustSec amid bug bounty dispute - Immunefi suspended Trust Security over accusations of manipulating issue... - https://cointelegraph.com/news/immunefi-suspends-trustsec-over-bounty-payment-dispute #securityvulnerability #trustsecurity #bountydispute #bugbounty #whitehats #immunefi #crypto #web3

RCE Vulnerability (CVE-2024-30052) Allow Attackers To Exploit Visual Studio via Dump Files https://gbhackers.com/cve-2024-30052-visual-studio-exploit/ #SecurityVulnerability #CVE/vulnerability #CyberSecurityNews #VisualStudio #Debugging #Exploit

Critical Arc Browser Vulnerability Let Attackers Execute Remote Code https://gbhackers.com/arc-browser-vulnerability/ #SecurityVulnerability #CybersecurityAudit #CVE/vulnerability #CyberSecurityNews #PatchManagement #BugBounty

#Roundcube 1.5.8 (LTS) has been released (#Webmail / #Mail / #IMAP / #SMTP / #LDAP / #Managesieve / #PHP / #MariaDB / #MySQL / #PostgreSQL / #SQLite / #OracleDB / #MSSQL / #CVE / #SecurityVulnerability) https://roundcube.net/

#Roundcube 1.6.8 (stable) has been released (#Webmail / #Mail / #IMAP / #SMTP / #LDAP / #Managesieve / #PHP / #MariaDB / #MySQL / #PostgreSQL / #SQLite / #OracleDB / #MSSQL / #CVE / #SecurityVulnerability) https://roundcube.net/

Solana prevents potential outage, patches critical vulnerability - Solana validator Laine said that an attacker could have attempted to rev... - https://cointelegraph.com/news/solana-fixes-critical-security-vulnerability #securityvulnerability #solanavalidators #networkoutage #blockchain #solana #crypto #patch

#ApacheHTTPd 2.4.62 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.62 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.62 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.61 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.61 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.61 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.59 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.59 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/

#ApacheHTTPd 2.4.59 has been released (#Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability) https://httpd.apache.org/