Samsung has released security update to address vulnerabilities in Samsung Mobile OS. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.
Users and administrators are encouraged to review Samsung Security Advisory and apply necessary updates.
GitHub has released security updates to address vulnerabilities in Apache Pulsar, Microsoft Django Backend and .NET. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.
Users and administrators are encouraged to review GitHub Security Advisories GHSA-xp2r-g8qq-44hh, GHSA-vmqv-47j8-gwv8 and GHSA-5fxj-whcv-crrc and apply necessary updates.
Rapid7 has released security updates to address vulnerabilities in InsightVM and Nexpose. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.
Users and administrators are encouraged to review Rapid7 Security Advisories insightvm-20240313 and nexpose-20240313 and apply necessary updates.
Advisory No: TZCERT/SA/2024/03/13-03
Date of First Release: 13th March 2024
Source: IBM
Software Affected: IBM Instana Observability
Overview:
IBM has released security patches to address critical vulnerabilities affecting IBM Instana Observability. The vulnerabilities could allow an attacker to execute arbitrary code on the affected system.
Description:
IBM Instana Observability is affected with arbitrary code execution vulnerabilities as the result of sandbox escape flaw and server-side request forgery flaw in the Promise handler Node.js vm2 and Node.js IP package respectively. Successful exploitation of these vulnerabilities could allow the attacker to obtain sensitive information and execute arbitrary code on the system.
Impact:
Successful exploitation of these vulnerabilities may allow the attacker to take control of affected IBM Instana Observability versions.
Solution:
IBM has released patches for these vulnerabilities. Users and administrators are encouraged to apply necessary updates.
References:
Advisory No: TZCERT/SA/2024/03/13-02
Date of First Release: 13th March 2024
Source: Apple
Software Affected: macOS Ventura and macOS Sonoma
Overview:
Apple has released security update to address a critical vulnerability affecting macOS Ventura and macOS Sonoma. The vulnerability could allow an attacker to execute arbitrary code on the affected system.
Description:
macOS Ventura and macOS Sonoma are affected with the use-after-free vulnerability found in the GarageBand for mac. The vulnerability allows the processing of the maliciously crafted file that may result into unexpected crash or arbitrary code execution.
Impact:
Successful exploitation of this vulnerability may allow the attacker to take control of affected system.
Solution:
Apple has released patches for this vulnerability. Users and administrators are encouraged to apply necessary updates.
References:
Tanzania Computer Emergency Response Team