Alerts

Apache has released a security update to fix multiple vulnerabilities in Apache HTTP Server. Apache HTTP Server version 2.4.54 and earlier is vulnerable to several attacks such as HTTP request smuggling, HTTP response splitting, and denial of service attacks. The severity of the mentioned vulnerabilities could allow the attacker to gain access to the affected systems and cause a

Microsoft has released an updated Microsoft Edge Stable version (109.0.1518.49) to fix multiple vulnerabilities in Microsoft Edge (Chromium-based). The addressed vulnerabilities could allow the remote attacker to gain elevated privileges or execute arbitrary code on the affected system by persuading the victim to visit a specially-crafted webpage. Sample of the addressed vulnerabilities: 1. Chromium Remote Code Execution Vulnerability

Juniper Networks has released security updates to address several vulnerabilities affecting multiple products. Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service. The remote attacker could exploit some of these vulnerabilities to crash the application by sending a specially-crafted request. Sample of the addressed vulnerabilities: Juniper Networks Junos OS and Junos

Vidar is a trojan malware based on a project called Arkei written in the C++ programming language that steals information and cryptocurrency from infected users. It is being used as malware-as-a-service on underground forums by Russianspeaking sellers. The Vidar stealer enables the threat actors to collect a wide range of information from compromised systems including Web browser cookies, history,

Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates address critical and important vulnerabilities. The severity of the addressed vulnerabilities could allow the remote attacker to execute arbitrary code or cause a denial of service on the affected system. Sample of the addressed vulnerabilities: 1. Adobe Acrobat and Adobe Reader

Google has released an updated Chrome version (109.0.5414.74/.75) for Windows, (109.0.5414.74) for Linux, and (109.0.5414.87) for Mac to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code, bypass security restrictions, or cause a denial of service on the vulnerable system, by persuading the victim to visit a specially crafted webpage. Sample of the

Zoom has released security updates to fix vulnerabilities in multiple products. the addressed vulnerabilities could allow the locally authenticated attacker to gain elevated privileges, bypass security restrictions, or traverse directories on the system. Samples of the addressed vulnerabilities: 1. Zoom Rooms for macOS Privilege Escalation (CVE-2022-36926): • CVSS: 8.8 • Attack Vector: Local • Attack Complexity: Low

Fortinet has released security updates to address multiple vulnerabilities across multiple products. The severity of the addressed vulnerabilities could allow the attacker to gain access, and execute or inject arbitrary code in the management interface or commands via specifically crafted HTTP requests on the affected products. Sample of the addressed vulnerabilities: 1. FortiADC – Command Injection in Web

Trend Micro has released a security update to address a vulnerability affecting Trend Micro Maximum Security version 2022 (v17.7). The severity of the addressed vulnerability could allow the low-privileged attacker to write a malicious executable to a specific location and in the process of removal and restoral, the attacker could replace an original folder with a mount point

Juniper Networks has released a security update to address a high-severity vulnerability affecting Junos OS 22.3R1 and Junos OS Evolved 22.3R1-EVO. The addressed vulnerability is caused by improper input validation in the Routing Protocol Daemon (rpd). The remote attacker could exploit this vulnerability by sending a specially-crafted BGP update message to cause a denial of service attack on the

Samba has released security updates to fix multiple vulnerabilities in versions 4.17.4, 4.16.8 and 4.15.13. The addressed vulnerabilities could allow the remote attacker to gain elevated privileges and take control of affected systems. Sample of addressed vulnerabilities: 1. Netlogon RPC Privilege Escalation (CVE-2022-38023): • CVSS: 8.1 • Attack Vector: Network • Attack Complexity: High • Privileges Required: