This channel is not dead, but we need your help. If you find something that might be interesting for broadcasting, please let us know in @itsectalk - thanks! 🚨

⚠️ iPhones/iPads Mail app vulnerable

"The flaws could eventually let remote hackers secretly take complete control over Apple devices just by sending an email to any targeted individual with his email account logged-in to the vulnerable app."

Severity: 🔶 High
More Information: https://yt.gl/tjqz8

#alert #severityhigh #vulnerability #apple #mailapp

📬 Spread the news, forward the message to your mobile management admins.
❓ Questions? Feedback? Want to discuss? Join us at @itsectalk

⚠️SonicWall VPN Portal Critical Flaw
Tripwire VERT has identified a stack-based buffer overflow in SonicWall Network Security Appliance (NSA).
A fix is available.

SonicWall has indicated that the following versions are vulnerable:
* SonicOS 6.5.4.7-79n and earlier
* SonicOS 6.5.1.11-4n and earlier
* SonicOS 6.0.5.3-93o and earlier
* SonicOSv 6.5.4.4-44v-21-794 and earlier
* SonicOS 7.0.0.0-1

(Severity: 🔸high)

Additional information:
https://www.tripwire.com/state-of-security/vert/sonicwall-vpn-portal-critical-flaw-cve-2020-5135/

#alert #severityHigh #vulnerability #firewall #sonicwall
#CVE2020-5135

⚠️Buffer overflow in sudo (linux utility) - ❗️ affects most distributions/versions - CVE-2021-3156
While a local user is required to exploit this vulnerability, even the account 'nobody' can exploit this vulnerability. An unprivileged user can gain root privileges on affected hosts!

Check if you are affected!
To check if you are affected, run sudoedit -s / as non-root user. If the response is sudoedit: your system is vulnerable.

The following "sudo" versions are vulnerable
* All legacy versions from 1.8.2 to 1.8.31p2
* All stable versions from 1.9.0 to 1.9.5p1

Severity: 🔸High

Additional information
https://yt.gl/sudobufferoverflow

#alert #severityHigh #vulnerability #linux #sudo

🌟 Feel free to discuss this issue in @itsectalk 👍 Please vote if this information was helpful to you.

⚠️ "Barcode Scanner" app on Android turned evil! Removed from playstore but not from your devices. It had over 10 million installs so there is a good chance that you know someone that has it. Please let them know.

App Name: Barcode Scanner
MD5: A922F91BAF324FA07B3C40846EBBFE30
Package Name: com.qrcodescanner.barcodescanner

Severity: 🔸High

Additional information
https://yt.gl/barcodeevil

#alert #severityHigh #maliciousupdate #barcodescanner #android

➡️ Please forward to your friends and family that could be using this app. Thanks for the report that was sent in.

⚠️ Microsoft Exchange Server - GENERAL ADVISORY - UPDATE IMMEDIATELY!
Several new flaws (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) have been reported and Microsoft issued an emergency fix. It is reported that the vulnerabilities are actively being exploited.

Affected: Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019.

More Information (Advisory/Updates): https://yt.gl/exchangeexp

(severity: 🔶 very high)

#alert #vulnerability #severityhigh #atlassian #confluence CVE-2022-26134.

➡️ Feel free to discuss this issue in @itsectalk and do your colleagues a favor and forward them this critical vulnerability.

For anyone who has the misfortune of dealing with interoperability between Windows and Linux: a significant Samba security update was just released. https://www.cisa.gov/uscert/ncas/current-activity/2022/02/01/samba-releases-security-updates

CVE IDs:

CVE-2021-44141
CVE-2021-44142
CVE-2022-0336

⚠️ Atlassian Confluence On-Premise (All recent versions) Remote Code Execution vulnerability!

If your Confluence is reachable from the Internet, take immediate action and restrict access. This is being exploited in the wild! There is no patch available as of right now.

Affected: All recent On-Prem Confluence Servers & Data Center
More Information (Advisory/Updates): https://yt.gl/f1kcv
(severity: 🔶 very high)

#alert #vulnerability #severityhigh #exchange #CVE-2021-26855 #CVE-2021-26857 #CVE-2021-26858 #CVE-2021-27065.

➡️ Feel free to discuss this issue in @itsectalk and do your colleagues a favor and forward them this critical vulnerability.

For those asking: Yes, this Channel is indeed still active. But please note that we will most likely only notify on REALLY important vulnerabilities. Feel free to join our group over at @itsectalk as well.

🚨 High-Severity PHP Vulnerabilities – PHP2Shell
Multiple high-severity vulnerabilities, collectively referred to as PHP2Shell, are expected to affect PHP versions dating back to PHP 5, potentially impacting a significant number of servers worldwide.

⚠️ Important considerations:
Older, end-of-life PHP versions may not receive security patches.
Official security updates are expected to be released later today (October 21).
Administrators should prepare to deploy patches as soon as they become available.

🔗 Official PHP Project Advisory:
https://yt.gl/php2shell

Vulnerability Info on rdintel:
https://yt.gl/php2shell-rdintel

🛡️ Potential Mitigation (UNCONFIRMED)
Disabling PHP’s session upload progress functionality might mitigate the vulnerability:
Add the following to your php.ini:
session.upload_progress.enabled = Off
Then restart PHP-FPM or your web server to apply the change.

⚠️ DISCLAIMER: This workaround has NOT been officially confirmed to prevent exploitation. It is based on preliminary information and should not be considered a substitute for security patches.
We’ll share further updates as more technical details become available.