⚠ S3 Ep49: Poison PACs, pointless alarms and phunky bugs [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep49: Poison PACs, pointless alarms and phunky bugs [Podcast]
Latest episode – listen now!
⚠ Windows zero-day MSHTML attack – how not to get booby trapped! ⚠
📖 Read
via "Naked Security".
Zero-day bug in MSHTML, the "mini-Internet Explorer" component of Windows, triggered by booby trapped Office files.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’ ❌
📖 Read
via "Threat Post".
John Hammond, security researcher with Huntress, discusses how financially motivated cybercrooks use and abuse cryptocurrency.📖 Read
via "Threat Post".
Threat Post
Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’
John Hammond, security researcher with Huntress, discusses how financially motivated cybercrooks use and abuse cryptocurrency.
🦿 SPDX becomes internationally recognized standard 🦿
📖 Read
via "Tech Republic".
In use for a decade as the de facto standard for communicating software bills of materials, SPDX formally becomes the internationally recognized ISO/IEC JTC 1 standard.📖 Read
via "Tech Republic".
TechRepublic
SPDX becomes internationally recognized standard
In use for a decade as the de facto standard for communicating software bills of materials, SPDX formally becomes the internationally recognized ISO/IEC JTC 1 standard.
‼ CVE-2021-32485 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964926.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32486 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964928.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38727 ‼
📖 Read
via "National Vulnerability Database".
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32487 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500736; Issue ID: ALPS04938456.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40284 ‼
📖 Read
via "National Vulnerability Database".
D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the web interface "/cgi-bin/New_GUI/Igmp.asp". Authenticated remote attackers can trigger this vulnerability by sending a long string in parameter 'igmpsnoopEnable' via an HTTP request.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32484 ‼
📖 Read
via "National Vulnerability Database".
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964917.📖 Read
via "National Vulnerability Database".
🦿 The top keywords used in phishing email subject lines 🦿
📖 Read
via "Tech Republic".
Some of these phrasings are standard day-to-day subject lines, but as one expert explained, "the attacker wants you to be moving too fast to stop and question if it's legitimate."📖 Read
via "Tech Republic".
TechRepublic
The top keywords used in phishing email subject lines
Some of these phrasings are standard day-to-day subject lines, but as one expert explained, "the attacker wants you to be moving too fast to stop and question if it's legitimate."
‼ CVE-2021-25466 ‼
📖 Read
via "National Vulnerability Database".
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28910 ‼
📖 Read
via "National Vulnerability Database".
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25454 ‼
📖 Read
via "National Vulnerability Database".
OOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19268 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19264 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25465 ‼
📖 Read
via "National Vulnerability Database".
An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25452 ‼
📖 Read
via "National Vulnerability Database".
An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25456 ‼
📖 Read
via "National Vulnerability Database".
OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28913 ‼
📖 Read
via "National Vulnerability Database".
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25464 ‼
📖 Read
via "National Vulnerability Database".
An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak.📖 Read
via "National Vulnerability Database".