‼ CVE-2020-19144 ‼
📖 Read
via "National Vulnerability Database".
Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38721 ‼
📖 Read
via "National Vulnerability Database".
FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability📖 Read
via "National Vulnerability Database".
🦿 Stop using your web browser security wrong 🦿
📖 Read
via "Tech Republic".
Chances are good you're not using your browser with a strong enough eye on security. Jack Wallen offers up some advice to the average user on how to browse safer.📖 Read
via "Tech Republic".
TechRepublic
Stop using your web browser security wrong
Chances are good you're not using your browser with a strong enough eye on security. Jack Wallen offers up some advice to the average user on how to browse safer.
❌ ‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise ❌
📖 Read
via "Threat Post".
A chain of exploits could allow a malicious Azure user to infiltrate other customers' cloud instances within Microsoft's container-as-a-service offering.📖 Read
via "Threat Post".
Threat Post
‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise
A chain of exploits could allow a malicious Azure user to infiltrate other customers' cloud instances within Microsoft's container-as-a-service offering.
⚠ S3 Ep49: Poison PACs, pointless alarms and phunky bugs [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep49: Poison PACs, pointless alarms and phunky bugs [Podcast]
Latest episode – listen now!
⚠ Windows zero-day MSHTML attack – how not to get booby trapped! ⚠
📖 Read
via "Naked Security".
Zero-day bug in MSHTML, the "mini-Internet Explorer" component of Windows, triggered by booby trapped Office files.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’ ❌
📖 Read
via "Threat Post".
John Hammond, security researcher with Huntress, discusses how financially motivated cybercrooks use and abuse cryptocurrency.📖 Read
via "Threat Post".
Threat Post
Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’
John Hammond, security researcher with Huntress, discusses how financially motivated cybercrooks use and abuse cryptocurrency.
🦿 SPDX becomes internationally recognized standard 🦿
📖 Read
via "Tech Republic".
In use for a decade as the de facto standard for communicating software bills of materials, SPDX formally becomes the internationally recognized ISO/IEC JTC 1 standard.📖 Read
via "Tech Republic".
TechRepublic
SPDX becomes internationally recognized standard
In use for a decade as the de facto standard for communicating software bills of materials, SPDX formally becomes the internationally recognized ISO/IEC JTC 1 standard.
‼ CVE-2021-32485 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964926.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32486 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964928.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38727 ‼
📖 Read
via "National Vulnerability Database".
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32487 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500736; Issue ID: ALPS04938456.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40284 ‼
📖 Read
via "National Vulnerability Database".
D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the web interface "/cgi-bin/New_GUI/Igmp.asp". Authenticated remote attackers can trigger this vulnerability by sending a long string in parameter 'igmpsnoopEnable' via an HTTP request.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32484 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964917.📖 Read
via "National Vulnerability Database".
🦿 The top keywords used in phishing email subject lines 🦿
📖 Read
via "Tech Republic".
Some of these phrasings are standard day-to-day subject lines, but as one expert explained, "the attacker wants you to be moving too fast to stop and question if it's legitimate."📖 Read
via "Tech Republic".
TechRepublic
The top keywords used in phishing email subject lines
Some of these phrasings are standard day-to-day subject lines, but as one expert explained, "the attacker wants you to be moving too fast to stop and question if it's legitimate."
‼ CVE-2021-25466 ‼
📖 Read
via "National Vulnerability Database".
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28910 ‼
📖 Read
via "National Vulnerability Database".
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25454 ‼
📖 Read
via "National Vulnerability Database".
OOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19268 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19264 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25465 ‼
📖 Read
via "National Vulnerability Database".
An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack.📖 Read
via "National Vulnerability Database".