‼ CVE-2021-27236 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-27231 ‼
📖 Read
via "National Vulnerability Database".
Hestia Control Panel through 1.3.3, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for a different customer's domain name, leading to spoofing of services or email messages.📖 Read
via "National Vulnerability Database".
🦿 Top 5 security risks to connected cars, according to Trend Micro 🦿
📖 Read
via "Tech Republic".
Analysts from Trend Micro rate DDoS attacks and electronic jamming as some of the highest cybersecurity risks for connected cars.📖 Read
via "Tech Republic".
TechRepublic
Top 5 security risks to connected cars, according to Trend Micro
Analysts from Trend Micro rate DDoS attacks and electronic jamming as some of the highest cybersecurity risks for connected cars.
🦿 State of malware: 3 key findings in the latest Malwarebytes report 🦿
📖 Read
via "Tech Republic".
Spyware activity spiked in 2020, and the malware-as-a-service business model got more sophisticated.📖 Read
via "Tech Republic".
TechRepublic
State of malware: 3 key findings in the latest Malwarebytes report
Spyware activity spiked in 2020, and the malware-as-a-service business model got more sophisticated.
⚠ Romance scams at all-time high: here’s what you need to know ⚠
📖 Read
via "Naked Security".
It's heartbreaking to get sucked into a romance scam, or to watch a friend or family member getting sucked in. Here's what to do...📖 Read
via "Naked Security".
Naked Security
Romance scams at all-time high: here’s what you need to know
It’s heartbreaking to get sucked into a romance scam, or to watch a friend or family member getting sucked in. Here’s what to do…
🕴 Black History Month 2021: Time to Talk Diversity and Cybersecurity 🕴
📖 Read
via "Dark Reading".
In an industry that consistently needs new ideas, it's essential to have individuals who think, speak, and act in diverse ways.📖 Read
via "Dark Reading".
Dark Reading
Black History Month 2021: Time to Talk Diversity and Cybersecurity
In an industry that consistently needs new ideas, it's essential to have individuals who think, speak, and act in diverse ways.
‼ CVE-2020-24841 ‼
📖 Read
via "National Vulnerability Database".
PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.📖 Read
via "National Vulnerability Database".
🕴 Fighting Fileless Malware, Part 3: Mitigations 🕴
📖 Read
via "Dark Reading".
Attackers can dodge the countermeasures you employ against fileless malware. So how do you mitigate the damage?📖 Read
via "Dark Reading".
🛠 TOR Virtual Network Tunneling Tool 0.4.5.6 🛠
📖 Read
via "Packet Storm Security".
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs).📖 Read
via "Packet Storm Security".
Packetstormsecurity
TOR Virtual Network Tunneling Tool 0.4.5.6 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Recon Informer 1.3 🛠
📖 Read
via "Packet Storm Security".
Recon-Informer is a basic real-time anti-reconnaissance detection tool for offensive security systems, useful for penetration testers. It runs on Windows/Linux and leverages scapy.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Recon Informer 1.3 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Palo Alto Networks Plans to Acquire Cloud Security Firm 🕴
📖 Read
via "Dark Reading".
Most of Fortune 100 firms have used Bridgecrew's service in their application development processes.📖 Read
via "Dark Reading".
Dark Reading
Palo Alto Networks Plans to Acquire Cloud Security Firm
Most of Fortune 100 firms have used Bridgecrew's service in their application development processes.
❌ Misconfigured Baby Monitors Allow Unauthorized Viewing ❌
📖 Read
via "Threat Post".
Hundreds of thousands of individuals are potentially affected by this vulnerability.📖 Read
via "Threat Post".
Threat Post
Misconfigured Baby Monitors Allow Unauthorized Viewing
Hundreds of thousands of individuals are potentially affected by this vulnerability.
❌ Microsoft Pulls Bad Windows Update After Patch Tuesday Headaches ❌
📖 Read
via "Threat Post".
Microsoft released a new servicing stack update (KB5001078) after an older one caused problems for Windows users installing Patch Tuesday security updates.📖 Read
via "Threat Post".
Threat Post
Microsoft Pulls Bad Windows Update After Patch Tuesday Headaches
Microsoft released a new servicing stack update (KB5001078) after an older one caused problems for Windows users installing Patch Tuesday security updates.
‼ CVE-2020-25340 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a memory leak that may result in a local denial of service (DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35566 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. An attacker can read arbitrary JSON files via Local File Inclusion.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35564 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35567 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure password for database access, but this password is shared across instances.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35565 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce detection is disabled by default.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-29023 ‼
📖 Read
via "National Vulnerability Database".
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35563 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an incomplete XSS filter allowing an attacker to inject crafted malicious code into the page.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-29027 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3.📖 Read
via "National Vulnerability Database".