Red Hat Security Advisory 2021-4845-05 - Red Hat OpenShift Container Storage is software-defined storage integrated with and optimized for the Red Hat OpenShift Container Platform. Red Hat OpenShift Container Storage is highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. Issues addressed include a code execution vulnerability.

Red Hat Security Advisory 2021-4844-01 - Samba is an open-source implementation of the Server Message Block protocol and the related Common Internet File System protocol, which allow PC-compatible machines to share files, printers, and various information.

Orangescrum version 1.8.0 suffers from a privilege escalation vulnerability.

Orangescrum version 1.8.0 suffers from multiple remote SQL injection vulnerabilities.

Orangescrum version 1.8.0 suffers from reflective and persistent cross site scripting vulnerabilities.

Red Hat Security Advisory 2021-4843-01 - Samba is an open-source implementation of the Server Message Block protocol and the related Common Internet File System protocol, which allow PC-compatible machines to share files, printers, and various information.

Opencart version 3.0.3.8 suffers from a session injection vulnerability.

This document aims at explaining some recent vulnerabilities in Apache HTTP Server that leads to attacks like path traversal and remote code execution.

This whitepaper provides an overview of a Polkit authentication bypass vulnerability that allows for local privilege escalation.

Red Hat Security Advisory 2021-4833-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.9.9. Issues addressed include a bypass vulnerability.

Nextar C472 POS suffers from a dll hijacking vulnerability.

This Metasploit module exploits CVE-2021-40539, a REST API authentication bypass vulnerability in ManageEngine ADSelfService Plus, to upload a JAR and execute it as the user running ADSelfService Plus - which is SYSTEM if started as a service.

D-Link DSL-3782 pre-authentication remote root exploit.

Backdoor.Win32.Coredoor.10.a malware suffers from a man-in-the-middle vulnerability.

Email-Worm.Win32.Deltad malware suffers from an insecure permissions vulnerability.

Whitepaper called Wireshark for Newbies. Written in Spanish.

Ubuntu Security Notice 5156-1 - It was discovered that ICU contains a double free issue. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code.

Backdoor.Win32.Coredoor.10.a malware suffers from bypass and code execution vulnerabilities.

Bagisto version 1.3.3 suffers from a client-side template injection vulnerability.

Gerdab.ir suffers from a remote SQL injection vulnerability.

Red Hat Security Advisory 2021-4837-02 - Mailman is a program used to help manage e-mail discussion lists. Issues addressed include bypass and cross site request forgery vulnerabilities.

Apple ColorSync suffers from a use of uninitialized memory in CMMNDimLinear::Interpolate.

Red Hat Security Advisory 2021-4838-02 - Mailman is a program used to help manage e-mail discussion lists. Issues addressed include bypass and cross site request forgery vulnerabilities.

Red Hat Security Advisory 2021-4839-02 - Mailman is a program used to help manage e-mail discussion lists. Issues addressed include bypass and cross site request forgery vulnerabilities.