‼ CVE-2020-35825 ‼
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35827 ‼
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, XR700 before 1.0.1.10, and RAX120 before 1.0.0.78.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35790 ‼
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35836 ‼
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, XR700 before 1.0.1.10, and RAX120 before 1.0.0.78.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35796 ‼
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX3920 before 1.0.0.84, EX6000 before 1.0.0.44, EX6100 before 1.0.2.28, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX6150 before 1.0.0.46, EX6200 before 1.0.3.94, EX6920 before 1.0.0.54, EX7000 before 1.0.1.90, EX7500 before 1.0.0.68, MK62 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, R6250 before 1.0.4.42, R6300v2 before 1.0.4.42, R6400 before 1.0.1.62, R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R6700 before 1.0.2.16, R6900P before 1.3.2.124, R6900 before 1.0.2.16, R7000 before 1.0.11.106, R7000P before 1.3.2.124, R7100LG before 1.0.0.56, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7900P before 1.4.1.62, R7960P before 1.4.1.62, R8000 before 1.0.4.58, R8000P before 1.4.1.62, R8300 before 1.0.2.134, R8500 before 1.0.2.134, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX200 before 1.0.2.102, RAX45 before 1.0.2.32, RAX50 before 1.0.2.32, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBS40V-200 before 1.0.0.46, RBW30 before 2.5.0.4, RS400 before 1.5.0.48, WN2500RPv2 before 1.0.1.56, WN3500RP before 1.0.0.28, WNDR3400v3 before 1.0.1.32, WNR1000v3 before 1.0.2.78, WNR2000v2 before 1.2.0.12, WNR3500Lv2 before 1.2.0.62, and XR300 before 1.0.3.50.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35847 ‼
📖 Read
via "National Vulnerability Database".
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35846 ‼
📖 Read
via "National Vulnerability Database".
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35850 ‼
📖 Read
via "National Vulnerability Database".
** DISPUTED ** An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue."📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35848 ‼
📖 Read
via "National Vulnerability Database".
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.📖 Read
via "National Vulnerability Database".
🕴 Mobile Endpoint Security: Still the Crack in the Enterprise's Cyber Armor 🕴
📖 Read
via "Dark Reading".
A combination of best practices and best-in-class technology will help keep your enterprise from falling victim to ever-growing threats.📖 Read
via "Dark Reading".
Dark Reading
Mobile Endpoint Security: Still the Crack in the Enterprise's Cyber Armor
A combination of best practices and best-in-class technology will help keep your enterprise from falling victim to ever-growing threats.
❌ Taking a Neighborhood Watch Approach to Retail Cybersecurity ❌
📖 Read
via "Threat Post".
Bugcrowd CTO Casey Ellis covers new cybersecurity challenges for online retailers.📖 Read
via "Threat Post".
Threat Post
Taking a Neighborhood Watch Approach to Retail Cybersecurity
Bugcrowd CTO Casey Ellis covers new cybersecurity challenges for online retailers.
🦿 7 on-the-ground big data strategies for 2021 🦿
📖 Read
via "Tech Republic".
Don't forget the routine tasks that make big data work for your company.📖 Read
via "Tech Republic".
🦿 Change your macOS power settings to prevent disconnecting from VPN/Wi-Fi when the computer is locked 🦿
📖 Read
via "Tech Republic".
You should always lock your computer when you walk away. But sometimes, that becomes a hassle. Here's one way to make it easier.📖 Read
via "Tech Republic".
TechRepublic
Change your macOS power settings to prevent disconnecting from VPN/Wi-Fi when the computer is locked
You should always lock your computer when you walk away. But sometimes, that becomes a hassle. Here's one way to make it easier.
❌ FBI Warn Hackers are Using Hijacked Home Security Devices for ‘Swatting’ ❌
📖 Read
via "Threat Post".
Stolen email credentials are being used to hijack home surveillance devices, such as Ring, to call police with a fake emergency, then watch the chaos unfold.📖 Read
via "Threat Post".
Threat Post
FBI Warn Hackers are Using Hijacked Home Security Devices for ‘Swatting’
Stolen email credentials are being used to hijack home surveillance devices, such as Ring, to call police with a fake emergency, then watch the chaos unfold.
‼ CVE-2019-16281 ‼
📖 Read
via "National Vulnerability Database".
Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-11103 ‼
📖 Read
via "National Vulnerability Database".
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2019-16747 ‼
📖 Read
via "National Vulnerability Database".
In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerability than CVE-2019-14431.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28413 ‼
📖 Read
via "National Vulnerability Database".
In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.📖 Read
via "National Vulnerability Database".
‼ CVE-2019-15523 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28095 ‼
📖 Read
via "National Vulnerability Database".
On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-17363 ‼
📖 Read
via "National Vulnerability Database".
USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-25069.📖 Read
via "National Vulnerability Database".