Security Affairs

JULY 8, 2019

The developer Tute Costa found a backdoor in the Ruby library during regular security audits before deploying his code in the production environment. The developer Tute Costa found a backdoor in the Ruby library during regular security audits. The attacker created a new version of the library (version 0.0.7 version 0.0.7

Libraries 106

Libraries Passwords Security IT 106

Security Affairs

NOVEMBER 6, 2018

Apache Struts Users have to update the Commons FileUpload library in Struts 2 that is affected by two vulnerabilities. Apache Struts developers have addressed two vulnerabilities in the Commons FileUpload library in Struts 2, the flaws can be exploited for remote code execution and denial-of-service (DoS) attacks. in June 2017.

Libraries 111

Libraries Access Security IT 111

Security Affairs

JANUARY 4, 2020

Maintainers of the OpenCV library addressed two buffer overflow flaws that could lead to arbitrary code execution. Maintainers of the OpenCV library addressed two high-severity buffer overflow vulnerabilities that could be exploited by an attacker to execute arbitrary code. SecurityAffairs – library, hacking).

Libraries 97

Libraries Data structuring Security IT 97

Security Affairs

NOVEMBER 6, 2019

Google experts found a flaw, tracked as CVE-2019-18408, in the compression library libarchive could lead to arbitrary code execution. Google experts found a vulnerability, tracked as CVE-2019-18408, in the compression library libarchive could be exploited to execute arbitrary code. . Pierluigi Paganini.

Libraries 75

Libraries Archiving Security Information Security 75

Security Affairs

APRIL 2, 2019

A change made months ago in an open-source JavaScript library introduced a cross-site scripting (XSS) vulnerability in Google Search. The Japanese security researcher Masato Kinugawa discovered an XSS vulnerability in Google Search that was introduced with a change made months ago in an open-source JavaScript library.

Libraries 110

Libraries Phishing Security IT 110

CILIP

APRIL 20, 2023

Controversial materials in libraries and what to do about them Controversy is never far away from Professor Louise Cooke – it is a subject that has informed her work, research and teaching since she began life as a librarian. She says: “It is one of the greatest challenges facing libraries today.

Libraries 52

Libraries Access Analytics IT 52

Security Affairs

JULY 9, 2019

Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm. The flaw could be exploited by hackers to compromise the security of affected services using the library. The popular library is currently used in more than 4 million projects on GitHub.

Libraries 97

Libraries Security IT Information Security 97

CILIP

JANUARY 27, 2020

Dominic Cummings: Libraries are ?desperately Dominic Cummings: Libraries are ?desperately DURING the 2019 General Election Boris Johnson said he loved libraries and wanted to invest in opening more of them, but added: ?We His special adviser, Dominic Cummings, has no such conditions attached to his support for libraries.

Libraries 52

Libraries Government Paper Archiving 52

Unwritten Record

APRIL 14, 2020

National Bookmobile Day is April 22, part of National Library Week (April 19-25). . A library is a place that stores information, a place where people from all walks of life have the opportunity to obtain textual and audiovisual material for education, entertainment, and enlightenment. Libraries, Mobile — Third Army La.

Libraries 65

Libraries Education Access Agriculture 65

CILIP

APRIL 20, 2020

online resources for leadership in libraries launched. Over the past few weeks, those working in our public libraries have demonstrated their expertise, creativity, and commitment to serving their communities. At this particular moment, it is critical that there is support for public library staff at every level. s platform.?

Libraries 52

Libraries Access IT 52

Security Affairs

JANUARY 29, 2020

Security researchers have spotted a vulnerability, tracked as CVE-2020-7247, that affects a core email-related library used by many BSD and Linux distributions. The CVE-2020-7247 flaw was introduced in the OpenSMTPD in May 2018, but many distros still use older implementation of the library that are not impacted. Pierluigi Paganini.

Libraries 107

Libraries Security IT Information Security 107

Security Affairs

JUNE 12, 2019

Tavis Ormandy, a white hat hacker Google Project Zero announced to have found a zero-day flaw in the SymCrypt cryptographic library of Microsoft’s operating system. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Libraries 104

Libraries Encryption Security IT 104

CILIP

FEBRUARY 17, 2021

Trends in the library technology market ? Ken Chad looks at the underlying issues and trends that are shaping library technology. His piece focuses on public libraries and libraries in higher education institutions. In public libraries the LMS is no longer the central piece of library technology it was.

Libraries 52

Libraries Marketing e-Discovery Education 52

CILIP

MARCH 6, 2020

a great, free digital resource for public libraries. a great, free digital resource for public libraries. DO your library users have health issues they want to find out more about? The service is only available on terminals in public libraries and cannot be accessed remotely. users on library premises. "At

Libraries 52

Libraries Access Communications IT 52

CILIP

JANUARY 27, 2020

CILIP celebrates new partnership with African Library and Information Association (AfLIA). CILIP, the UK library and information association, has announced a new partnership with the African Library and Information Association (AfLIA) as part of the successful Working Internationally programme, funded by the Arts Council England.

Libraries 52

Libraries Education IT 52

Security Affairs

AUGUST 30, 2020

The npm security team removed a malicious JavaScript library from the npm repository that was designed to steal sensitive files from the victims. The fallguys library claimed to provide an interface to the “ Fall Guys: Ultimate Knockout ” game API. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Libraries 144

Libraries Access Security IT 144

Security Affairs

OCTOBER 21, 2020

The CVE-2020-15999 flaw is a memory corruption bug that resides in the FreeType font rendering library, which is included in standard Chrome releases. Google Project Zero is recommending other app development teams who use the same FreeType library to update their software as well. The FreeType version 2.10.4 address this issue.

Libraries 132

Libraries Security Information Security IT 132

Security Affairs

OCTOBER 18, 2020

Microsoft released two out-of-band security updates to address remote code execution (RCE) bugs in the Microsoft Windows Codecs Library and Visual Studio Code. The CVE-2020-17022 is a remote code execution vulnerability that exists in the way that Microsoft Windows Codecs Library handles objects in memory. ” reads the advisory.

Libraries 138

Libraries Manufacturing Security IT 138

Security Affairs

SEPTEMBER 2, 2024

Cicada 3301 is the name given to three sets of puzzles posted under the name “3301” online between 2012 and 2014. A second round of puzzles began one year later on January 4, 2013, and then a third round following the confirmation of a fresh clue posted on Twitter on January 4, 2014.

Ransomware 136

Ransomware Encryption Libraries IT 136

Security Affairs

JANUARY 28, 2021

The libprocesshider open-source tool is available on Github since 2014 and is able to “hide a process under Linux using the ld preloader.” ” The “preloading” technique allows the system to load a custom shared library before other system libraries are loaded.

Libraries 142

Libraries IT Mining Security 142

Security Affairs

SEPTEMBER 7, 2020

The trick used by the Epic Macnchego gang consists of compiling the documents with a.NET library called EPPlus , instead of the standard Microsoft Office software. ” The library can generate files in multiple spreadsheet formats, it also supports Excel 2019. .” ” reads the analysis published by NVISO.

Libraries 136

Libraries Phishing Passwords Security 136

Security Affairs

OCTOBER 17, 2020

Experts warn that systems running applications that imported one of these packages should be potentially compromised because the three JavaScript libraries opened web shells on the computers running them. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Libraries 145

Libraries Security Access IT 145

Security Affairs

MAY 7, 2020

Samsung released this week a security patch that addresses a critical vulnerability, tracked as CVE-2020-8899, impacting all smartphones sold since 2014. “A possible memory overwrite vulnerability in Quram qmg library allows possible remote arbitrary code execution. system libraries.” or libhwui.so

IT 141

IT Libraries Security Access 141

National Archives Records Express

JUNE 24, 2024

The 2024 End of Term Web Archive partners include the Internet Archive, University of North Texas, Stanford University, Library of Congress, U.S. The End of Term Web Archive is a collaborative effort which takes place every four years to preserve a record of U.S. government websites for historical and research purposes.

Archiving 52

Archiving Libraries Government 52

Security Affairs

MARCH 27, 2020

A few days ago, Microsoft warned of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. The vulnerabilities affects the way Windows Adobe Type Manager Library handles a specially-crafted multi-master font – Adobe Type 1 PostScript format. Pierluigi Paganini.

Libraries 142

Libraries Risk Security IT 142

Security Affairs

MARCH 23, 2020

Microsoft warns of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. Microsoft warns of hackers exploiting two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 134

Libraries Risk Authentication Security 134

Security Affairs

NOVEMBER 20, 2024

When packages are updated, especially ones affecting shared libraries or services, it’s often necessary to restart those services or even the entire system for changes to take effect. released in April 2014. The needrestart package is installed by default in Ubuntu Server, starting with version 21.04.

63

63

Security Affairs

NOVEMBER 25, 2022

Researchers discovered that devices from Dell, HP, and Lenovo are still using outdated versions of the OpenSSL cryptographic library. Binarly researchers discovered that devices from Dell, HP, and Lenovo are still using outdated versions of the OpenSSL cryptographic library. ” continues the report. that dates back to 2009.

Libraries 102

Libraries Manufacturing Communications Security 102

Security Affairs

OCTOBER 17, 2018

The Libssh library is affected by a severe flaw that could be exploited by attackers to completely bypass authentication and take over a vulnerable server. released in 2014, The issue tracked as CVE-2018-10933 was discovered by Peter Winter-Smith from NCC Group, it ties a coding error in Libssh. “ libssh versions 0.6

Libraries 111

Libraries Authentication Passwords Security 111

Security Affairs

MARCH 20, 2020

x that fix two XSS vulnerabilities affecting the CKEditor library. x that address two XSS vulnerabilities that affect the CKEditor library. “The Drupal project uses the third-party library CKEditor , which has released a security improvement that is needed to protect some Drupal configurations.”

Libraries 138

Libraries Risk Access Security 138

Security Affairs

SEPTEMBER 8, 2020

” CVE-2020-1129 – Microsoft Windows Codecs Library Remote Code Execution Vulnerability , which can be exploited to perform code execution if an affected system views a specially crafted image. Since this vulnerability resides in the codecs library, multiple applications could be affected. Pierluigi Paganini.

Libraries 115

Libraries Security Information Security IT 115

Security Affairs

MARCH 3, 2019

Npcap is the Nmap Project’s packet sniffing (and sending) library for Windows. It is based on the WinPcap / Libpcap libraries, but with improved speed, portability, security. “ Npcap is the exciting and feature-packed update to the venerable WinPcap packet capture library. Qt, GLib, GnuTLS, and Python).

Libraries 111

Libraries Security IT 111

Security Affairs

SEPTEMBER 24, 2020

The vulnerability ties on how Instagram uses third-party libraries for image processing, in particular, the open-source JPEG decoder Mozjpeg. “Our blog post describes how image parsing code, as a third party library, ends up being the weakest point of Instagram’s large system. ” reads the analysis published by CheckPoint.

Access 134

Access Libraries Communications IT 134

Security Affairs

APRIL 29, 2020

The discovery urges Apple into implementing additional security measures to protect these components, following the approach already adopted by Google to protect multimedia processing libraries. Multimedia processing libraries are used by the modern mobile OS to automatically manage multimedia files (i.e. images, audio, and videos).

Libraries 144

Libraries Paper Security Cybersecurity 144

Security Affairs

JANUARY 12, 2019

include new database and automation APIs, evasion modules and libraries, language support, improved performance. includes new evasion modules and libraries, users can test their applications by generating their own evasion modules using the C programming language, a choice that makes the development easier. Metasploit 5.0

Libraries 112

Libraries Security IT 112

CILIP

OCTOBER 29, 2024

At the Library of Birmingham, which houses the archives for Birmingham Royal Ballet: “Of the four dancers we knew with a connection to the company, they could only find assets for one, Evan Williams. She said: “In university libraries, dance of any kind usually occupies quite a small proportion of texts.

Libraries 59

Libraries Archiving Access IT 59

Security Affairs

APRIL 6, 2020

” The Kinsing miner is a Golang -based Linux agent that uses several Go libraries, including: go-resty – an HTTP and REST client library, used to communicate with a Command and Control (C&C) server. gopsutil – a process utility library, used for system and processes monitoring. ” concludes the experts.

Mining 135

Mining Libraries Cloud Communications 135