#linux

WordPress Slider Revolution plugin versions 4.x.x suffer from a remote shell upload vulnerability.

WordPress Slider Revolution plugin version 4.9.2 suffers from a directory traversal vulnerability.

WordPress Slider Revolution plugin version 4.1.3 suffers from a directory traversal vulnerability.

WordPress Slider Revolution plugin version 4.1.2 suffers from a directory traversal vulnerability.

WordPress Slider Revolution plugin version 3.0.8 suffers from a directory traversal vulnerability.

WordPress Profile Builder plugin version 3.0.5 suffers from a remote SQL injection vulnerability.

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive (JAR) files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security solutions that don't properly validate the JAR file format," Deep Instinct security researcher

A zero-day vulnerability in FortiOS SSL-VPN that Fortinet addressed last month was exploited by unknown actors in attacks targeting the government and other large organizations. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at governmental or government-related targets," Fortinet researchers said in a post-mortem analysis published this week. The

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

SBOMs aren't enough. OpenSSF's Alpha-Omega brings in new blood to help secure the open source projects most impactful to the software supply chain.