‼ CVE-2021-37199 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial-of-service in the device.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33729 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker that is able to import firmware containers to an affected system could execute arbitrary commands in the local database.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33732 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33722 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability when exporting a firmware container. With this a privileged authenticated attacker could create arbitrary files on an affected system.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41546 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). Affected devices write crashdumps without checking if enough space is available on the filesystem. Once the crashdump fills the entire root filesystem, affected devices fail to boot successfully. An attacker can leverage this vulnerability to cause a permanent Denial-of-Service.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33734 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33731 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33736 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33724 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28145 ‼
📖 Read
via "National Vulnerability Database".
Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app\attachment\admin\index.php, which allows attackers to access sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-27395 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions < SP3 Update 6), SIMATIC Process Historian 2019 (All versions), SIMATIC Process Historian 2020 (All versions). An interface in the software that is used for critical functionalities lacks authentication, which could allow a malicious user to maliciously insert, modify or delete data.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33725 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33730 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33733 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.📖 Read
via "National Vulnerability Database".
🗓️ Chinese phone manufacturer ZTE launches public bug bounty program 🗓️
📖 Read
via "The Daily Swig".
Researchers invited to test for flaws under new YesWeHack platform📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Chinese phone manufacturer ZTE launches public bug bounty program
Researchers invited to test for flaws under new YesWeHack platform
🕴 Not Hitting Your Security KPIs? Get the Whole Business Involved 🕴
📖 Read
via "Dark Reading".
CISOs can deliver better outcomes and get the support they need by linking security processes to business results.📖 Read
via "Dark Reading".
Dark Reading
Not Hitting Your Security KPIs? Get the Whole Business Involved
CISOs can deliver better outcomes and get the support they need by linking security processes to business results.
🕴 RealDefense Completes Fourth Cyber Security Acquisition; Adds STOPzilla to Its Portfolio 🕴
📖 Read
via "Dark Reading".
RealDefense holding company seeks to acquire additional security companies and brands through partnership with Corbel Capital Partners.📖 Read
via "Dark Reading".
Dark Reading
RealDefense Completes Fourth Cyber Security Acquisition; Adds STOPzilla to Its Portfolio
RealDefense holding company seeks to acquire additional security companies and brands through partnership with Corbel Capital Partners.
🕴 Oracle Cloud Joins ONUG Collaborative 🕴
📖 Read
via "Dark Reading".
ONUG Collaborative welcomes new members including Oracle Cloud, Sysdig, Wiz, Intuit, Adobe, Qualys, and F5.📖 Read
via "Dark Reading".
Dark Reading
Oracle Cloud Joins ONUG Collaborative
ONUG Collaborative welcomes new members including Oracle Cloud, Sysdig, Wiz, Intuit, Adobe, Qualys, and F5.
🕴 Palo Alto Networks to Transfer Stock Exchange Listing to Nasdaq 🕴
📖 Read
via "Dark Reading".
Palo Alto Networks anticipates meeting the requirements for inclusion in the NASDAQ-100 index when it rebalances in December.📖 Read
via "Dark Reading".
Dark Reading
Palo Alto Networks to Transfer Stock Exchange Listing to Nasdaq
Palo Alto Networks anticipates meeting the requirements for inclusion in the NASDAQ-100 index when it rebalances in December.
🕴 Kaspersky Updates Industrial Cybersecurity Service 🕴
📖 Read
via "Dark Reading".
Kaspersky Industrial CyberSecurity unlocks centralized management and visibility across entire OT infrastructure.📖 Read
via "Dark Reading".
Dark Reading
Kaspersky Updates Industrial Cybersecurity Service
Kaspersky Industrial CyberSecurity unlocks centralized management and visibility across entire OT infrastructure.
❌ Apple Releases Urgent iOS Updates to Patch New Zero-Day Bug ❌
📖 Read
via "Threat Post".
The bug is under attack. Within hours of the patch release, a researcher published POC code, calling it a "great" flaw that can be used for jailbreaks and local privilege escalation.📖 Read
via "Threat Post".
Threat Post
Apple Releases Urgent iOS Updates to Patch New Zero-Day Bug
The bug is under attack. Within hours of the patch release, a researcher published POC code, calling it a "great" flaw that can be used for jailbreaks and local privilege escalation.