Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

AWS

Everything RedTeam Tribune has reported about AWS: 2 stories, newest first. Part of our Vulnerabilities coverage.

16 Oct
Vulnerabilities

FreeRTOS MPU Authorization Bug on Cortex-R82 Fixes in V11.3.2 to Block Kernel Memory Access

Unprivileged tasks in FreeRTOS V11.3.0 and V11.3.1 can bypass memory protection on Arm Cortex-R82, accessing kernel regions outside assigned boundaries.

15 Oct
Vulnerabilities

AWS Athena Synapse Connector Flaw May Return Unintended Data

A vulnerability in the AWS Athena Federated Query Synapse Connector could cause unintended data returns when querying specially crafted table names.