ProHoster > Blog

Category: Blog

Blog Section

A vulnerability in the Perl module Spreadsheet::ParseExcel was exploited to compromise Barracuda ESG.

Posted on

A critical vulnerability (CVE-2023-7101) has been identified in the Perl module Spreadsheet::ParseExcel, which provides functions for parsing Excel files. The vulnerability allows for arbitrary code execution when processing XLS or XLSX files containing specially crafted number formatting rules. The issue arises from using data obtained from the processed file in the construction of an "eval" call. The problem has been fixed in Spreadsheet::ParseExcel 0.66 update. An exploit prototype exists. Vulnerable code: if […]

A vulnerability in the Qt implementation of the HTTP/2 protocol.

Posted on

A vulnerability (CVE-2023-51714) has been discovered in the Qt library's implementation of the HTTP/2 protocol, allowing data to be written beyond the allocated buffer. This vulnerability is caused by an integer overflow in the code handling packed headers (HPack) and manifests when receiving more than 4 GB of total HTTP header data or 2 GB for a single header. The problem has been addressed in Qt updates 5.15.17, 6.2.11, 6.5.4, and 6.6.2. […]

Issues arising from vulnerability reports prepared by AI tools

Posted on

Daniel Stenberg, the author of the curl utility for transferring data over networks, criticized the use of AI tools in generating vulnerability reports. Such reports may include detailed information, be written in plain language, and appear to be high-quality; however, without thoughtful analysis, they can mislead by substituting real issues with superficially presentable garbage content. The Curl project […]

An experiment to create an NPM package dependent on all packages in the repository.

Posted on

One of the developers of JavaScript packages conducted an experiment by creating and publishing a package called ‘everything’ in the NPM repository, which encompasses dependencies for all existing packages in the repository. To implement such a capability, the ‘everything’ package is directly dependent on five packages ‘@everything-registry/chunk-N’, which in turn are linked with dependencies to over 3000 packages ‘sub-chunk-N’, each of which refers to 800 […]

The Maestro kernel, written in Rust and partially compatible with Linux.

Posted on

A project has been introduced for developing a lightweight Unix-like kernel in Rust, implementing a subset of system calls from the Linux kernel sufficient for creating typical working environments. The project was initiated in 2018 and initially used the C language, but in 2020 it was completely restarted from scratch, taking into account the accumulated experience, and switched to Rust to reduce the likelihood of errors, […]

Release of the IPFire 2.27 Core 182 distribution for creating firewalls

Posted on

A new release of the distribution for building routers and firewalls, IPFire 2.27 Core 182, has been published. IPFire features a simple installation process and configuration setup through an intuitive web interface, rich in clear graphs. The size of the installation ISO image is 423 MB (x86_64, AArch64). The system is modular; in addition to basic packet filtering and traffic management functions, modules for implementing a prevention system for IPFire are available […]

Database Popularity Ranking. PostgreSQL has been named the Database of the Year 2023

Posted on

DB-Engines has updated its database popularity ranking and awarded the title of Database of the Year 2023 to the PostgreSQL project, which demonstrated the largest growth in popularity over the past year among 417 tracked systems. The second place was awarded to the cloud platform Databricks, which rose from 19th to 17th place in the ranking, while third place went to the Google BigQuery engine, which improved from 21st to […]

Release of SBCL 2.4.0, implementation of the Common Lisp language

Posted on

The release of SBCL 2.4.0 (Steel Bank Common Lisp), a free implementation of the Common Lisp programming language, has been published. The project code is written in Common Lisp and C, and is distributed under the BSD license. In the new release: Compatibility-breaking changes: *COMPILE-VERBOSE* and *LOAD-VERBOSE* are bound to NIL when the system is run with the command line argument ‘—script’. When searching for a core file, the system checks the correctness of […]

Niklaus Wirth, the creator of the Pascal language, has passed away

Posted on

On January 1st, Niklaus Wirth, one of the leading theorists in programming, passed away just a month shy of his 90th birthday. Wirth is the author of 10 programming languages, among which Pascal, Modula-2, and Oberon are the most well-known, and he is also one of the creators of the structured programming paradigm, the ideas of executing intermediate bytecode, and garbage collection in interpreters. For his contributions to the development […]

Niklaus Wirth has passed away

Posted on

On January 1st, at the age of 90, one of the theorists and pioneers of computer science, Turing Award winner, Swiss scientist Niklaus Wirth, passed away. Wirth is known for his work on programming languages such as Algol, Modula, and Oberon. However, perhaps the most famous result of his work is the Pascal programming language, with which entire generations of students began their journey as programmers. […]

The Shutter screenshot tool has gained support for Wayland.

Posted on

The popular screenshot tool Shutter has received support for Wayland sessions. This was made possible thanks to the efforts of developer Maurizio V., who adapted Shutter to work with modern Wayland sessions used by most major Linux distributions, including Ubuntu. Shutter is an advanced screenshot application that offers more features and capabilities than standard tools. It supports: taking screenshots with […]

« to the beginning 347 348 349 350 351 352 353 354 355 356 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster