Skip to content

F1TYM1

InfoSec News

  • Fity Feeds
  • Fity Blog
  • About
  • Other

Malware / Ransomware

Analyze Attacker Behavior, Endpoint Detection Anomalies with LogRhythm and Carbon Black  
Magento PHP Injection Loads JavaScript Skimmer
Cryptomining Campaign Linked to Iranian Software Firm
Laptops given to British schoolkids came preloaded with malware and talked to Russia when booted
Microsoft Details OPSEC, Anti-Forensic Techniques Used by SolarWinds Hackers
MrbMiner Crypto-Mining Malware Links to Iranian Software Company
Between the Chair and the Keyboard: Creating Security Culture
DNS, Lost Bitcoin, and the new Big Sur Control Center – Intego Mac Podcast Episode 171
Ransomware’s cryptofootprint
Ransomware Took Heavy Toll on US in 2020: Researchers
New malware discovered in SolarWinds investigation
Sophisticated Watering Hole Attack
5 minutes with Dmitriy Ayrapetov - K-12 cybersecurity challenges
Injecting a Backdoor into SolarWinds Orion
Telegram security and privacy tips
An employee, fired
VERT Threat Alert: January 2021 Patch Tuesday Analysis
Deep dive into the Solorigate second-stage activation: From SUNBURST to TEARDROP and Raindrop
Backdoor.Win32.WinShell.30 Remote Stack Buffer Overflow / Missing Authentication
Backdoor.Win32.Zxman Missing Authentication
Backdoor.Win32.Xel Remote Authentication Buffer Overflow
Backdoor.Win32.Verify.f Missing Authentication
Backdoor.Win32.Onalf Missing Authentication
SQL Server Malware Tied to Iranian Software Firm, Researchers Allege
Strengthen Android privacy and security via Telsy free secure DNS over TLS
APT34 (aka OilRig, aka Helix Kitten) attacks Lebanon government entities with MailDropper implants
Diving into YarGen
Strengthen Android privacy and security via Telsy free secure DNS over TLS
APT34 (aka OilRig, aka Helix Kitten) attacks Lebanon government entities with MailDropper implants
China is reportedly scanning tourists' phones with malware - CNET
Mac Malware Pushed via Google Search Results, Masquerades as Flash Installer
Thousands of Facebook Users Hit in Malware Distribution Campaign
Facebook Removes Accounts Used to Infect Thousands With Malware
New Warning on Ryuk Ransomware
Delivering major enhancements in Windows Defender Application Control with the Windows 10 May 2019 Update
Malware makes an exhibition of itself
Microsoft to Require Multi-Factor Authentication for Cloud Solution Providers
Need more evidence that IoT security is a big deal? Here's what NIST has to say
Chronicle, Alphabet's push into security, will join Google Cloud
Finding the Gold in a Pile of Pennies - Long Tail Analysis in PowerShell, (Thu, Jun 27th)

CVE-2020-13355: Gitlab CE/EE (Path Traversal)

The post CVE-2020-13355: Gitlab CE/EE (Path Traversal) appeared first on Virsec Systems.

*** This is a Security Bloggers Network syndicated blog from Blog – Virsec Systems authored by Satya Gupta. Read the original post at: https://virsec.com/cve-2020-13355-gitlab-ce-ee-path-traversal/

Related

Posted on 2020-12-09Author BlogCategories Fity Feeds

Post navigation

Previous Previous post: Patch Tuesday, Good Riddance 2020 Edition
Next Next post: Usage Scenarios for Externalized Trust