BlackRabbitZ – Seite 3 – RabbitZ Academy

Mai
31

CVE-2024-36137 A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the –allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a „read-only“ file descriptor to change the owner and permissions of a file.

Information published.

BlackRabbitZ No comments Common Vulnerabilities, CVE, exploitability, exploitable, Exposures, malware, Sicherheitslücken

Mai
31

0

Endlich billiger? Apple Music soll günstiges Einstiegs-Abo bekommen

Apple, Iphone, Ipad, Apple Tv, Bundle, Apple Music, Homepod

Günstiger, werbefinanziert und limitiert: Apple Music plant offenbar einen großen Strategiewechsel. Neue Funde in der Android-Beta zeigen klare Warnungen für Nutzer, die zu viele Songs überspringen. Der Angriff auf Spotify nimmt damit Fahrt auf. (Weiter lesen)

BlackRabbitZ No comments Android, Apple, Betriebsysteme, Linux, Microsoft, News, OS, Windows

Mai
31

0

CVE-2024-22018 A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the –allow-fs-read flag is used. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to. This vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.

Information published.

BlackRabbitZ No comments Common Vulnerabilities, CVE, exploitability, exploitable, Exposures, malware, Sicherheitslücken

Mai
31

0

Acer Swift Air 14: MacBook-Neo-Konkurrent startet für ca. 800 Euro mit Wildcat Lake

Nachdem Apple mit dem MacBook Neo im März erstmals ein Notebook für 699 Euro und 799 Euro auf den Markt gebracht hatte, zieht Acer zur Computex 2026 mit einem günstigen Windows-Modell nach.

BlackRabbitZ No comments Acer, AMD, Computer, CPU, Geforce, GPU, Handy, Hardware, Intel, Laptop, Lenovo, Notebook, Ryzen, Telefon, Xeon

Mai
31

0

CVE-2017-3736 There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.

Information published.

BlackRabbitZ No comments Common Vulnerabilities, CVE, exploitability, exploitable, Exposures, malware, Sicherheitslücken

Mai
31

0

CVE-2026-28387 Potential Use-after-free in DANE Client Code

Information published.

BlackRabbitZ No comments Common Vulnerabilities, CVE, exploitability, exploitable, Exposures, malware, Sicherheitslücken

Mai
31

0

CVE-2026-31789 Heap Buffer Overflow in Hexadecimal Conversion

Information published.

BlackRabbitZ No comments Common Vulnerabilities, CVE, exploitability, exploitable, Exposures, malware, Sicherheitslücken

Mai
31

0

CVE-2026-28388 NULL Pointer Dereference When Processing a Delta CRL

Information published.

BlackRabbitZ No comments Common Vulnerabilities, CVE, exploitability, exploitable, Exposures, malware, Sicherheitslücken

Mai
31

0

Gigabyte Z890 AORUS Elite WiFi7 Plus im Test: Ein lohnenswertes Refresh-Modell?

Auch Gigabyte hat im laufenden Jahr 2026 für Intels Core-Ultra-200S-Plus-Prozessoren neue LGA1851-Mainboards ins Sortiment aufgenommen, die als Refresh-Modelle gelten.