packetstormsecurity

• newGitHub sqlpad/sqlpad Template Injection / Remote Code Execution
  Proof of concept automation code to exploit a template injection vulnerability in GitHub repository sqlpad/sqlpad version prior to 6.10.1 that can result in remote code execution.
  - 5 hours ago 10 Sep 24, 5:09pm -
• newSpring Cloud Data Flow Remote Code Execution
  Proof of concept exploit for Spring Cloud Data Flow versions prior to 2.11.4 that achieves remote code execution through a malicious upload.
  - 5 hours ago 10 Sep 24, 5:05pm -
• newPowerVR DEVMEMXINT_RESERVATION::ppsPMR Use-After-Free
  The array ppsPMR in DEVMEMXINT_RESERVATION holds references to PMR structures (using PMRRefPMR2()), intending to prevent the PMRs' physical memory from being released. However, PMRs with PVRSRV_MEMALLOCFLAG_NO_OSPAGES_ON_ALLOC (which for OSMem PMRs i…
  - 5 hours ago 10 Sep 24, 4:59pm -
• newUbuntu Security Notice USN-6997-1
  Ubuntu Security Notice 6997-1 - It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial of service.
  - 6 hours ago 10 Sep 24, 4:09pm -
• newOX App Suite Backend 7.10.6-rev66 / 8.24.7 Open Redirect
  An open redirection vulnerability has been reported for a version of the Spring Framework which is shipped with OX App Suite backend versions 7.10.6-rev66 and 8.24.7.
  - 6 hours ago 10 Sep 24, 4:07pm -
• newUbuntu Security Notice USN-6996-1
  Ubuntu Security Notice 6996-1 - Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser s…
  - 6 hours ago 10 Sep 24, 4:06pm -
• newProxmark3 4.18994 Custom Firmware
  This is a custom firmware written for the Proxmark3 device. It extends the currently available firmware. This release is nicknamed "Backdoor".
  - 6 hours ago 10 Sep 24, 4:03pm -
• newUbuntu Security Notice USN-6841-2
  Ubuntu Security Notice 6841-2 - USN-6841-1 fixed a vulnerability in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that PHP could early return in the filter_var function resulting in i…
  - 6 hours ago 10 Sep 24, 4:02pm -
• newRed Hat Security Advisory 2024-6510-03
  Red Hat Security Advisory 2024-6510-03 - An update for emacs is now available for Red Hat Enterprise Linux 9.
  - 6 hours ago 10 Sep 24, 4:02pm -
• newRed Hat Security Advisory 2024-6508-03
  Red Hat Security Advisory 2024-6508-03 - Red Hat build of Apache Camel 4.4.2 for Spring Boot release and security update is now available. Issues addressed include an information leakage vulnerability.
  - 6 hours ago 10 Sep 24, 4:02pm -

cPaneladmin

• cPanel 112 Cheat Sheet Now Available
  Our latest cPanel cheat sheet is now available. This one applies to all current versions, specifically 112+. Head over to our Cheat Sheets page to download it!…
  - 14 Jun 23, 6:15pm -
• Elevate: Unable to backup EA4 profile
  When trying to upgrade from CentOS to AlmaLinux, cPanel 110 and earlier might experience the following error: Edit /etc/cpanel/ea4/profiles/pkg-manifest.json and remove the extra comma at the end of any list, for example: Then re-run Elevate and it s…
  - 14 Jun 23, 2:43pm -
• How to Block Emails From the Future Using SpamAssassin In cPanel
  Getting emails from the future is a classic sign of SPAM. Unfortunately, SpamAssassin only bumps the score of these emails by less than 2 points, which isn’t usually enough to get it marked as SPAM. To fix this, you can add a rule to SpamAssassin t…
  - 14 Jun 23, 2:27pm -
• Fixing AutoSSL “provider cannot currently accept incoming requests”
  When using cPanel/Sectigo as the SSL provider for AutoSSL, you may occasionally see this error in the autossl log: The “cPanel (powered by Sectigo)” provider cannot currently accept incoming requests. The system will try again later. This error s…
  - 22 Sep 22, 8:23pm -
• Troubleshooting Website SSL Issues – No Padlock
  Having SSL problems? One of the most common issues our team handles is related to websites not properly displaying over HTTPS, whether it be the website either not loading entirely, or just not showing the green padlock: If you’re sure that the SSL…
  - 18 Mar 19, 6:07pm -
• Safely Removing virtfs on a cPanel Server
  If you’re on a cPanel server, you’ve probably noticed a sizable folder called ‘virtfs’ sitting in /home, which would appear at first to be using a ton of space. Your first inclination might be to delete it, but don’t! Most likely, the files…
  - 14 Jan 19, 7:25pm -
• Custom Exim Filter Examples
  cPanel allows you to easily create custom Exim filters by simply dropping the rules in /usr/local/cpanel/etc/exim/sysfilter/options/ and running: /scripts/buildeximconf service exim restart Here are a couple useful examples of filters we’ve create…
  - 29 Aug 18, 6:08pm -
• How to Set up a Local cPanel FastUpdate Mirror
  If you have more than a few cPanel servers in your network, it may be a good idea to set up your own mirror to serve the files necessary to run cPanel updates. Doing this could save time and bandwidth, as well as prevent problems caused by mirrors be…
  - 17 Feb 16, 5:16pm -
• Installing LetsEncrypt SSL Certificates on CentOS + cPanel Servers
  Update! cPanel supports LetsEncrypt, but you just need to install the plugin for it to work. To do this, run: /scripts/install_lets_encrypt_autossl_provider Once installed, Let’s Encrypt will appear in WHM’s Manage AutoSSL interface (Home >> SSL/…
  - 15 Feb 16, 5:14pm -
• cPanel Update Fails Due to RPM Conflict
  The cPanel update fails due to a problem installing RPMs, but is not specific about what the problem is: [20160203.180007] Testing if the newly downloaded RPMS can be installed without conflict [20160203.180007] Testing RPM transaction [20160203.1800…
  - 3 Feb 16, 6:25pm -

reddit admin

• newHow do you extend non-lvm partition?
  Hey guys, how do you extend non lvm partition, i want to extend /usr to 8GB and this is the setup. these are xfs filesystem sda 9:0 0 4G 0 disk /boot sdb 9:16 0 20G 0 disk /logs sdc 9:32 0 4G 0 disk /tmp sdd 9:48 0 4G 0 disk /usr sde 9:64 0 18G 0 dis…
  - 7 hours ago 10 Sep 24, 2:22pm -
• Apache2, PHP 8.2, krb5 dosnt work but Mod loaded
  PHP Fatal error: Uncaught Error: Call to undefined function krb5_init_context() Yeah, Apache2, debian12, php8.2 , I tried everything Automatic Install, Manual Download of the latest Version. The Modul get loaded, but the functions dosnt load/Work…
  - 1 day ago 9 Sep 24, 4:24pm -
• Redsocks - routing DNS (udp)
  Hi all, I'm trying to funnel specific devices through a proxy connected to my router, but am having trouble funneling the DNS queries through. The aim is to have multiple phones connected to this router, and allow certain devices to use the proxy con…
  - 1 day ago 9 Sep 24, 1:39pm -
• Readline keybinds vs window manager key binds
  Which one do you prefer? And, importantly, why? submitted by /u/unixbhaskar [link] [comments]
  - 2 days ago 9 Sep 24, 7:11am -
• Should I worry about hackers attacking my server with random http calls? if so, how can I stop them?
  I have a small vps that hosts a saas for my clients, so a healthy uptime is a must here. My problem is that I'm suffering from the usual script attack that targets random urls, the classic POST /my-account, or POST /.well-known/whatever that always e…
  - 2 days ago 8 Sep 24, 10:11pm -
• Linux Distributions Timeline
  submitted by /u/grimtongue [link] [comments]
  - 4 days ago 7 Sep 24, 6:41am -
• Skipping PAM modules based on account type?
  Hello everyone, I am a little green to Linux administration so I hope you guys can help with this hopefully easy problem. I am hooking up a linux (Debian 12) box to AD, and I am trying to get it so PAM authenticates via Duo. The problem comes with a…
  - 4 days ago 7 Sep 24, 12:43am -
• Baffling behavior with source IP changing via loopback device
  I'm having a bizarre and baffling problem that I can't seem to wrap my head around. The situation is that we have three servers that run an etcd cluster. For security reasons, I have iptables rules in place that limit access to the etcd ports 2379 an…
  - 4 days ago 6 Sep 24, 6:25pm -
• What File Integrity Monitor (FIM) Has Least False Positives Due To System Updates
  I'm always getting LFD System File Integrity notices from my Cpanel servers. My servers are locked down pretty good by network firewall allowing only a few ports through and ConfigServer, SSH port is only opened to a single IP I use, running Immunify…
  - 4 days ago 6 Sep 24, 3:17pm -
• Help Understanding Auditd
  Hi all, Major linux noob here. I've done about as much research as I can before making this post. I still don't fully understand the best way to send audit logs to a syslog collector (Server running our SIEM's log forwarding agent). In my test lab (R…
  - 4 days ago 6 Sep 24, 11:38am -

LinuxActionShow

• Transitioning to LINUX Unplugged, wrapping up this Sub.
  Well look at that LINUX Unplugged is now our longest running Linux show. It's about to hit episode 200 in just a few more weeks. We've been debating what to do with a subreddit that was created for LAS. Since the start of LUP this sub has also been c…
  - 9 May 17, 7:18pm -
• [x-post] [Runs Linux] I put Debian on my Kindle! • r/linux
  [link] [comments]
  - 9 May 17, 7:14pm -
• Deepin 15.4 - See What's New
  submitted by /u/Mongaz [link] [comments]
  - 9 May 17, 6:53pm -
• Thunderbird’s Future Home
  submitted by /u/gabriel_3 [link] [comments]
  - 9 May 17, 2:41pm -
• Chuwi LapBook 12.3 is a 2K Ubuntu Laptop for $329.
  submitted by /u/mitcoes [link] [comments]
  - 9 May 17, 9:14am -
• [Suggestion] Dedicated audio and video rss feeds
  If we could get RSS feeds dedicated to audio intended segments and other feeds for video dedicated segments it would be very easy to get one going to our home media solution and the other to the phone. If not it will be nice if it says in the descrip…
  - 9 May 17, 8:40am -
• Prosody IM - Jabber/XMPP server
  submitted by /u/mitcoes [link] [comments]
  - 9 May 17, 7:56am -
• White Noise 2 officially released with Linux support, along with some major updates
  submitted by /u/Khaotic_Kernel [link] [comments]
  - 9 May 17, 6:56am -
• Google’s “Fuchsia” Smartphone OS Dumps Linux, Has A Wild New UI. Taking A Look At Google's Mysterious Third Operating System.
  submitted by /u/NetWiz69 [link] [comments]
  - 9 May 17, 5:11am -
• openSUSE 101: get started with Free Software now!
  submitted by /u/gabriel_3 [link] [comments]
  - 9 May 17, 4:36am -

linuxfoundation

linuxinsider

• Kubuntu Focus Iridium Laptops Set New Built-for-Linux Standard
  The pre-built Linux Kubuntu Focus Iridium laptop line is an unexpectedly good alternative to running any Linux operating system on converted Windows PCs. The post Kubuntu Focus Iridium Laptops Set New Built-for-Linux Standard appeared first on LinuxI…
  - 14 days ago 27 Aug 24, 1:00pm -
• Wolfi Linux Might Be the Next Cloud Security Savior
  Wolfi takes a novel approach focused on the rapid adoption of containerized and cloud-native workloads. One important principle of its design is prioritizing update speed over stability. The post Wolfi Linux Might Be the Next Cloud Security Savior ap…
  - 54 days ago 18 Jul 24, 12:00pm -
• Enhancing Web Performance With Nginx Load Balancing on Linux Systems
  Nginx is a versatile and high-performance server known for its capabilities in web serving, reverse proxying, caching, load balancing, and media streaming. Its asynchronous, event-driven architecture has made it one of the most efficient and reliable…
  - 63 days ago 9 Jul 24, 12:00pm -
• Essential Tips for Reliable Linux Backups
  These Linux backup strategies help protect data and system files, avoid the pitfalls of unreliable backups, and streamline recovery in case of disaster. The post Essential Tips for Reliable Linux Backups appeared first on LinuxInsider.
  - 77 days ago 25 Jun 24, 3:00pm -
• Upgrade to Ubuntu Pro for 5 Years of Free Extended Support
  Ubuntu Pro subscriptions are free for personal use, and you can extend long-term support for your OS by an additional five years. With this extended support, you'll receive security and bug fixes without needing to perform a manual OS upgrade. The po…
  - 90 days ago 12 Jun 24, 3:45pm -
• Dynebolic Linux Return Falls Short of Creative Goals
  The beta 4.0 release of Dynebolic Linux announced innovations for creatives looking for a self-contained production and publishing tool. If you are unfamiliar with distributions built on the KDE desktop and others, you could easily be misled about it…
  - 99 days ago 3 Jun 24, 11:47pm -
• Can Public-Private Partnerships Improve Open-Source Security?
  Better collaboration between public and private sectors to advance open-source security is a major unresolved technology concern, especially as open-source software gains global dominance alongside artificial intelligence technology. The post Can Pub…
  - 30 May 24, 12:00pm -
• Post-Open Licensing Could Offer Software Devs Funding Alternatives
  The open-source community faces pressing challenges with licensing and revenue, prompting a shift toward more sustainable and clearly defined models to protect and advance its foundational principles. The post Post-Open Licensing Could Offer Software…
  - 7 May 24, 4:23pm -
• Upgrading to Ubuntu 24.04 LTS Noble Numbat: Step-by-Step Guide
  This step-by-step guide on upgrading to Ubuntu 24.04 LTS Noble Numbat covers preparation, execution, and post-upgrade steps for a smooth transition. The post Upgrading to Ubuntu 24.04 LTS Noble Numbat: Step-by-Step Guide appeared first on LinuxInside…
  - 30 Apr 24, 4:00pm -
• How To Connect via OpenVPN on Ubuntu
  There are many VPN protocols available, each with its pros and cons. In this guide, you'll learn how to establish a secure connection using OpenVPN on Ubuntu. The post How To Connect via OpenVPN on Ubuntu appeared first on LinuxInsider.
  - 19 Apr 24, 3:00pm -

arstechnica

• Coder deletes open source add-on for Chef in protest over ICE contract
  CEO said multiple Chef customers affected; now Chef won't renew contract.
  - 23 Sep 19, 6:59pm -
• Debian 10: Playing catch-up with the rest of the Linux world (that’s a good thing)
  If you skipped the last release, Debian 10 (Buster) should encourage an update into 2019.
  - 11 Sep 19, 11:40am -
• Hack in the box: Hacking into companies with “warshipping”
  For under $100, compact hardware can turn a shipped package into a Trojan horse for attacks.
  - 13 Aug 19, 9:24pm -
• Microsoft publishes first Edge for macOS preview, promises to make it truly “Mac-like”
  Microsoft is making sure to take advantage of the Mac's hardware and design.
  - 20 May 19, 10:40pm -
• Windows dual booting no longer looking likely on Pixelbooks
  Development work appeared to grind to a halt last December.
  - 15 May 19, 10:50pm -
• Microsoft open sources algorithm that gives Bing some of its smarts
  You can ask "How tall is the tower in Paris?" and it knows what you're talking about.
  - 15 May 19, 3:51pm -
• Microsoft: The open source company
  The times, they are a-changin'—even bits of Windows will be open source.
  - 10 May 19, 9:51pm -
• Windows 10 will soon ship with a full, open source, GPLed Linux kernel
  The new Windows Subsystem for Linux will use a real Linux kernel.
  - 6 May 19, 8:20pm -
• Microsoft’s plan for Edge: Integrated IE compatibility, better privacy
  New features will make Edge more than just a reskinned Chrome.
  - 6 May 19, 4:27pm -
• Developers love Python and TypeScript, get paid for Clojure, and aren’t using blockchain
  Visual Basic remains as unpopular as ever.
  - 10 Apr 19, 7:44pm -

technewsworld

• newApple Weaves AI Into Latest Watch, AirPods, iPhone Models
  Apple's flavor of generative artificial intelligence, called Apple Intelligence, was laced throughout its latest watch, AirPods, and phone offerings, announced at its "Glowtime" event on Monday. The post Apple Weaves AI Into Latest Watch, AirPods, iP…
  - 10 hours ago 10 Sep 24, 12:00pm -
• AMD and Copilot+ Set the Stage for Xbox AI
  Let’s talk about what to expect when the AI Xbox comes to market next year, and we’ll close with my Product of the Week, a new AI-enabled processor from Intel Lunar Lake. The post AMD and Copilot+ Set the Stage for Xbox AI appeared first on TechN…
  - 1 day ago 9 Sep 24, 12:00pm -
• Protecting Kids From Immersive Tech Could Lead to Over-Censorship
  Attempts to protect children's safety in the two-dimensional realm of online social media could adversely impact the 3D world of augmented and virtual reality, according to a newly released report by a technology think tank. The post Protecting Kids…
  - 6 days ago 4 Sep 24, 12:00pm -
• AMD Strengthens Its Corporate Responsibilities Initiatives
  AMD is pushing the boundaries of what is possible with technology while ensuring that its operations and products contribute positively to society and the environment. The post AMD Strengthens Its Corporate Responsibilities Initiatives appeared first…
  - 11 days ago 30 Aug 24, 4:25pm -
• EdTech Innovations Breaking the Mold in Learning and Teaching
  When used correctly, technology such as smartboards and AI-powered presentation devices reshape learning and create positive learning environments for students. The post EdTech Innovations Breaking the Mold in Learning and Teaching appeared first on…
  - 12 days ago 29 Aug 24, 12:00pm -
• AI-Enhanced Next-Gen Smart Glasses Could Revolutionize Wearables
  The 2014 Google Glass debacle stigmatized smart glasses, but the devices may be poised for a comeback. Despite the failure of Google Glass, Meta and Google appear to be all in on the next generation of smart glasses that combine fashion, functionalit…
  - 14 days ago 27 Aug 24, 12:00pm -
• AMD’s Brand Value Surpasses Intel’s for the First Time
  This is a "man bites dog" story because, for much of the two companies’ existence, Intel's brand value ranked among the highest in the world, consistently outpacing that of AMD. Now, in the latest Kantar Brandz report listing the 100 most valuable…
  - 15 days ago 26 Aug 24, 12:00pm -
• Global AI Safety Hampered by Indecision, Regulatory Delays
  Governments seek to create security safeguards around artificial intelligence, but roadblocks and indecision are delaying cross-nation agreements on priorities and obstacles to avoid. The post Global AI Safety Hampered by Indecision, Regulatory Delay…
  - 19 days ago 22 Aug 24, 12:00pm -
• Cuban and Stewart on the Future of AI and Ending Abusive Drug Prices
  Until now, I haven’t been a fan of billionaire businessperson Mark Cuban. However, based on what I saw last week in his interview with Jon Stewart on "The Daily Show," I couldn’t have been more wrong about him. The post Cuban and Stewart on the F…
  - 22 days ago 19 Aug 24, 12:00pm -
• Meet the EdYOU Adaptable AI Meta-Human Learning Solution
  A new AI-powered approach to personalized computer instruction could help mitigate the impact of teacher shortages, understaffed classrooms, and lackluster self-learning, issues that have worsened since the pandemic. The post Meet the EdYOU Adaptable…
  - 25 days ago 16 Aug 24, 12:00pm -