ATENTION‼ New - CVE-2017-12580
📖 Read
via "National Vulnerability Database".
An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable (for example, "ntmarta.dll"). When the installer EXE is executed by the user, the DLL located in the EXE's current directory will be loaded instead of the Windows DLL, allowing the attacker to run arbitrary code on the affected system.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1583
📖 Read
via "National Vulnerability Database".
Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.📖 Read
via "National Vulnerability Database".
❌ RSAC: Keeping Smart Cities Safe From Hacks ❌
📖 Read
via "Threatpost".
As cities grow more connected, municipal operators must deal with new risks like ransomware, IoT hacks and more.📖 Read
via "Threatpost".
Threat Post
Forrester: Keeping Smart Cities Safe From Hacks
As cities grow more connected, municipal operators must deal with new risks like ransomware, IoT hacks and more.
🔏 Companies Increasingly Complacent Around Data Breach Preparedness 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Ponemon Institute's annual data breach readiness survey suggests the increased adoption of security technologies but the continuation of problems, like spear phishing attacks.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Companies Increasingly Complacent Around Data Breach Preparedness
Ponemon Institute's annual data breach readiness survey suggests the increased adoption of security technologies but the continuation of problems, like spear phishing attacks.
ATENTION‼ New - CVE-2019-14892
📖 Read
via "National Vulnerability Database".
A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14384
📖 Read
via "National Vulnerability Database".
The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-11675
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
🔐 Report: Coronavirus is negatively impacting international call quality 🔐
📖 Read
via "Security on TechRepublic".
When entire regions are quarantined, home-bound people are overloading local switches, reducing international call quality and interrupting connectivity.📖 Read
via "Security on TechRepublic".
TechRepublic
Coronavirus is negatively impacting international call quality
When entire regions are quarantined, home-bound people are overloading local switches, reducing international call quality and interrupting connectivity.
🕴 Walgreens' Mobile App Exposes Customers' Info 🕴
📖 Read
via "Dark Reading: ".
An error in the app allowed some secure chat users to see medical information that wasn't theirs.📖 Read
via "Dark Reading: ".
Darkreading
Walgreens' Mobile App Exposes Customers' Info
An error in the app allowed some secure chat users to see medical information that wasn't theirs.
ATENTION‼ New - CVE-2018-19658
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-19599
📖 Read
via "National Vulnerability Database".
Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-19284
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-18479
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-17572
📖 Read
via "National Vulnerability Database".
InfluxDB 0.9.5 has Reflected XSS in the Write Data module.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-16357
📖 Read
via "National Vulnerability Database".
An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-16356
📖 Read
via "National Vulnerability Database".
An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-15820
📖 Read
via "National Vulnerability Database".
EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-15819
📖 Read
via "National Vulnerability Database".
EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js.📖 Read
via "National Vulnerability Database".
🔐 Phishing: Leading targets, breaking myths, and educating users 🔐
📖 Read
via "Security on TechRepublic".
Vade Secure's Adrien Gendre explains why the end user is an important link in the security chain.📖 Read
via "Security on TechRepublic".
TechRepublic
Phishing: Leading targets, breaking myths, and educating users
Vade Secure's Adrien Gendre explains why the end user is an important link in the security chain.
❌ Gamer Alert: Serious Nvidia Flaw Plagues Graphics Driver ❌
📖 Read
via "Threatpost".
Several flaws found in Nvidia's graphics drivers could enable denial of service, remote code execution and other malicious attacks.📖 Read
via "Threatpost".
Threat Post
Gamer Alert: Serious Nvidia Flaw Plagues Graphics Driver
Several flaws found in Nvidia's graphics drivers could enable denial of service, remote code execution and other malicious attacks.