The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In
More on Process
Other advisories
- Not ratedosv:CLEANSTART-2020-VZ41053Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhcl...
- Not ratedosv:CLEANSTART-2024-DM47223Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities
- Not ratedosv:CLEANSTART-2023-KQ18335vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination
- Not ratedosv:CLEANSTART-2023-MT89346invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode
- Not ratedosv:CLEANSTART-2024-BH36220On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>
- Not ratedosv:CLEANSTART-2024-CI67524When constructing a permission prompt for WebRTC, a URI was supplied from the content process
- Not ratedosv:CLEANSTART-2023-OX97566Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0
- Not ratedosv:CLEANSTART-2024-XG79226When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution
Other news entries
- Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposedBreachpwn.watch
- Trusting Unsloth’s trust setting could mean executing malicious codeNewsCSO Online
- Long-Hidden Flaws Patched in EPICS Research Facility Control SoftwareNewsSecurityWeek
- Nobody Trusts the Security Questionnaire. We Rely on It Anyway.NewsSecurityWeek
- Code-execution flaw in UEFI firmware affects most servers on planet EarthNewsArs Technica — Security
- Node2Shell puts Microsoft and Node.js on Brotli patch dutyNewsCSO Online
- Stolen AI Reasoning Could Help China Build Cheaper RivalsNewsSecurityWeek
- Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityNewsCisco PSIRT
ID