๐Ÿ›ก Cybersecurity & Privacy ๐Ÿ›ก - News
25.8K subscribers
89.2K links
๐Ÿ—ž The finest daily news on cybersecurity and privacy.

๐Ÿ”” Daily releases.

๐Ÿ’ป Is your online life secure?

๐Ÿ“ฉ lalilolalo.dev@gmail.com
Download Telegram
โ€ผ CVE-2021-3728 โ€ผ

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24529 โ€ผ

The Grid Gallery รƒยขรขโ€šยฌรขโ‚ฌล“ Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24549 โ€ผ

The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, such as to read arbitrary files from the server. This allows high privilege users such as administrator to access any file on the web server outside of the blog directory via a path traversal attack.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-3731 โ€ผ

LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker to trick a targetted user to execute unintended actions.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24506 โ€ผ

The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24564 โ€ผ

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24571 โ€ผ

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24554 โ€ผ

The Paytm รƒยขรขโ€šยฌรขโ‚ฌล“ Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24555 โ€ผ

The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or escaping, leading to a SQL Injection issue. Furthermore, the ajax action is lacking any CSRF and capability check, making it available to any authenticated user.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24556 โ€ผ

The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST parameters, inserting them in the DB and then outputting them back in the Subscriber list (/wp-admin/edit.php?post_type=kes_campaign&page=kento_email_subscriber_list_settings), leading a Stored XSS issue.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24561 โ€ผ

The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24547 โ€ผ

The KN Fix Your Title WordPress plugin through 1.0.1 was vulnerable to Authenticated Stored XSS in the separator field.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24565 โ€ผ

The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them. Furthermore, the settings are not escaped when output in attributes, leading to a Stored Cross-Site Scripting issue.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24551 โ€ผ

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter before using it in a SQL statement, leading to a SQL injection issue

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-35465 โ€ผ

Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and Arm China STAR-MC1 (in the STAR SE configuration).

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24524 โ€ผ

The GiveWP รƒยขรขโ€šยฌรขโ‚ฌล“ Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.

๐Ÿ“– Read

via "National Vulnerability Database".
โŒ Managing Privileged Access to Secure the Post-COVID Perimeter โŒ

Joseph Carson, chief security scientist & advisory CISO at ThycoticCentrify, discusses how to implement advanced privileged-access practices.

๐Ÿ“– Read

via "Threat Post".
๐Ÿฆฟ Windows 365 Business: How this new tool can help your organization ๐Ÿฆฟ

Simon Bisson tried out the new Microsoft 365 tool, which allows you to create virtual machines for your staff working from home. Here's what he learned.

๐Ÿ“– Read

via "Tech Republic".
๐Ÿ›  GRR 3.4.5.1 ๐Ÿ› 

GRR Rapid Response is an incident response framework focused on remote live forensics. The goal of GRR is to support forensics and investigations in a fast, scalable manner to allow analysts to quickly triage attacks and perform analysis remotely. GRR consists of 2 parts: client and server. GRR client is deployed on systems that one might want to investigate. On every such system, once deployed, GRR client periodically polls GRR frontend servers for work. "Work" means running a specific action: downloading file, listing a directory, etc. GRR server infrastructure consists of several components (frontends, workers, UI servers) and provides web-based graphical user interface and an API endpoint that allows analysts to schedule actions on clients and view and process collected data.

๐Ÿ“– Read

via "Packet Storm Security".
๐Ÿ›  Faraday 3.17.1 ๐Ÿ› 

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

๐Ÿ“– Read

via "Packet Storm Security".
โŒ Windows 10 Admin Rights Gobbled by Razer Devices โŒ

So much for Windows 10's security: a zero-day in the device installer software grants admin rights just by plugging in a mouse or other compatible device.

๐Ÿ“– Read

via "Threat Post".