Skip to content

F1TYM1

InfoSec News

  • Fity Feeds
  • Fity Blog
  • About
  • Other

Malware / Ransomware

Joker Android Trojan Lands in Huawei AppGallery App Store
How to Spot a Clubhouse Download That Is Actually Malware
It’s Never Too Late To Teach Your Kids About Good Digital Practices
Security Researchers Find Critical Zero-Day Exploit in Zoom Messenger
Alert — There's A New Malware Out There Snatching Users' Passwords
Hackers Tampered With APKPure Store to Distribute Malware Apps
Zero days explained: How unknown vulnerabilities become gateways for attackers
APKPure is not safe, distributes Trojans | Kaspersky official blog
Researchers uncover a new Iranian malware used in recent cyberattacks
How do we stamp out the ransomware business model? Ban insurance payouts for one, says ex-GCHQ director
Collaboration Platforms Increasingly Abused for Malware Distribution, Data Exfiltration
Digging Into the Third Zero-Day Chrome Flaw of 2021
Another supply-chain attack? Android maker Gigaset injects malware into victims' phones via poisoned update
Lockdown Saw Rise in Wine Domains and Wine Scammers
A new headache for ransomware-hit companies. Extortionists emailing your customers
Hackers Are Exploiting Discord Links to Serve Up Malware
Ransomware: From blockers to cryptors and beyond | Kaspersky official blog
Unofficial Android App Store APKPure Infected With Malware
New Malware Downloader Spotted in Targeted Campaigns
Microsoft Warns of Malware Delivery via Google URLs
Google’s Project Zero Finds a Nation-State Zero-Day Operation
Cybercriminals Continue to Exploit Human Nature Through Phishing and Spam Attacks
Watch Out—That 'Call of Duty: Warzone' Cheat Might Be Malware
How ransomware makes victims pay | Kaspersky official blog
Joker malware infects over 500,000 Huawei Android devices
Cryptomining containers caught coining cryptocurrency covertly
Beating security fatigue with Troy Hunt, Chloé Messdaghi, and Tanya Janca: Lock and Code S02E06
How ransomware gangs are connected, sharing resources and tactics
Investigating a unique “form” of email delivery for IcedID malware
Malicious code in APKPure app
Online testing firm agrees to security audit after inquiry from senator
White House asks for additional $110 million in CISA funding to address cyber threats
Financial industry preps for proposal that would require 36-hour breach notification
White House to nominate NSA veterans Chris Inglis, Jen Easterly as national cyber director, CISA chief
Fed chair deems cyber threat top risk to financial sector
Strengthen Android privacy and security via Telsy free secure DNS over TLS
APT34 (aka OilRig, aka Helix Kitten) attacks Lebanon government entities with MailDropper implants
Diving into YarGen
Strengthen Android privacy and security via Telsy free secure DNS over TLS
APT34 (aka OilRig, aka Helix Kitten) attacks Lebanon government entities with MailDropper implants

CVE-2020-13355: Gitlab CE/EE (Path Traversal)

The post CVE-2020-13355: Gitlab CE/EE (Path Traversal) appeared first on Virsec Systems.

*** This is a Security Bloggers Network syndicated blog from Blog – Virsec Systems authored by Satya Gupta. Read the original post at: https://virsec.com/cve-2020-13355-gitlab-ce-ee-path-traversal/

Related

Posted on 2020-12-09Author BlogCategories Fity Feeds

Post navigation

Previous Previous post: Patch Tuesday, Good Riddance 2020 Edition
Next Next post: Usage Scenarios for Externalized Trust