‼ CVE-2020-17513 ‼
📖 Read
via "National Vulnerability Database".
In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.📖 Read
via "National Vulnerability Database".
🦿 Cybersecurity experts hail new IoT law 🦿
📖 Read
via "Tech Republic".
The bill would increase protection for the billions of connected devices "owned or controlled by the government" in homes and businesses.📖 Read
via "Tech Republic".
TechRepublic
Cybersecurity experts hail new IoT law
The bill would increase protection for the billions of connected devices "owned or controlled by the government" in homes and businesses.
🕴 Startups Should Do Things That Don't Scale, but Security Isn't One of Them 🕴
📖 Read
via "Dark Reading".
Emerging businesses that don't embrace scalable security do so at their own peril.📖 Read
via "Dark Reading".
Dark Reading
Startups Should Do Things That Don't Scale, but Security Isn't One of Them
Emerging businesses that don't embrace scalable security do so at their own peril.
‼ CVE-2020-29227 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.📖 Read
via "National Vulnerability Database".
🛠 Sifter 11-R3 🛠
📖 Read
via "Packet Storm Security".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Sifter 11-R3 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 WhatWeb Scanner 0.5.4 🛠
📖 Read
via "Packet Storm Security".
WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different. WhatWeb also identifies version numbers, email addresses, account IDs, web framework modules, SQL errors, and more. WhatWeb supports an aggression level to control the trade off between speed and reliability.📖 Read
via "Packet Storm Security".
Packetstormsecurity
WhatWeb Scanner 0.5.4 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ New Windows Trojan Steals Browser Credentials, Outlook Files ❌
📖 Read
via "Threat Post".
The newly discovered Python-based malware family targets the Outlook processes, and browser credentials, of Microsoft Windows victims.📖 Read
via "Threat Post".
Threat Post
New Windows Trojan Steals Browser Credentials, Outlook Files
The newly discovered Python-based malware family targets the Outlook processes, and browser credentials, of Microsoft Windows victims.
🦿 US government agencies compromised by foreign nation-state 🦿
📖 Read
via "Tech Republic".
Stretching back for months, the breaches were pulled off by exploiting a vulnerability in network monitoring software from SolarWinds, according to security firm FireEye.📖 Read
via "Tech Republic".
TechRepublic
US government agencies compromised by foreign nation-state
Stretching back for months, the breaches were pulled off by exploiting a vulnerability in network monitoring software from SolarWinds, according to security firm FireEye.
‼ CVE-2020-35382 ‼
📖 Read
via "National Vulnerability Database".
SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-14244 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which would execute with the privileges of the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35378 ‼
📖 Read
via "National Vulnerability Database".
SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-14268 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client.📖 Read
via "National Vulnerability Database".
🔏 SolarWinds Hacked, Used in Potentially Massive Supply Chain Attack 🔏
📖 Read
via "Digital Guardian".
A global intrusion campaign involving the company’s IT monitoring and management software could date back to March.📖 Read
via "Digital Guardian".
Digital Guardian
SolarWinds Hacked, Used in Potentially Massive Supply Chain Attack
A global intrusion campaign involving the company’s IT monitoring and management software could date back to March.
🕴 2021 Security Budgets: Top Priorities, New Realities 🕴
📖 Read
via "Dark Reading".
An unprecedented 2020 has shaken up security leaders' usual list of must-have technologies. What's on the horizon? They share with us their spending plans for 2021.📖 Read
via "Dark Reading".
Dark Reading
2021 Security Budgets: 6 Top Priorities, New Realities
An unprecedented 2020 has shaken up security leaders' usual list of must-have technologies. What's on the horizon? They share with us their spending plans for 2021.
❌ Microsoft Office 365 Credentials Under Attack By Fax ‘Alert’ Emails ❌
📖 Read
via "Threat Post".
Emails from legitimate, compromised accounts are being sent to numerous enterprise employees with the aim of stealing their O365 credentials.📖 Read
via "Threat Post".
Threat Post
Microsoft Office 365 Credentials Under Attack By Fax ‘Alert’ Emails
Emails from legitimate, compromised accounts are being sent to numerous enterprise employees with the aim of stealing their O365 credentials.
❌ DHS Among Those Hit in Sophisticated Cyberattack by Foreign Adversaries – Report ❌
📖 Read
via "Threat Post".
The attack was mounted via SolarWinds Orion, in a manual and targeted supply-chain effort.📖 Read
via "Threat Post".
Threat Post
DHS Among Those Hit in Sophisticated Cyberattack by Foreign Adversaries – Report
The attack was mounted via SolarWinds Orion, in a manual and targeted supply-chain effort.
‼ CVE-2020-25179 ‼
📖 Read
via "National Vulnerability Database".
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35338 ‼
📖 Read
via "National Vulnerability Database".
The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon."📖 Read
via "National Vulnerability Database".
‼ CVE-2020-25175 ‼
📖 Read
via "National Vulnerability Database".
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-15733 ‼
📖 Read
via "National Vulnerability Database".
An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28856 ‼
📖 Read
via "National Vulnerability Database".
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access controls.📖 Read
via "National Vulnerability Database".