๐Ÿ›ก Cybersecurity & Privacy ๐Ÿ›ก - News
25.8K subscribers
89.2K links
๐Ÿ—ž The finest daily news on cybersecurity and privacy.

๐Ÿ”” Daily releases.

๐Ÿ’ป Is your online life secure?

๐Ÿ“ฉ lalilolalo.dev@gmail.com
Download Telegram
โ€ผ CVE-2010-2496 โ€ผ

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38389 โ€ผ

Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38440 โ€ผ

FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38434 โ€ผ

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could leverage this vulnerability to execute arbitrary code.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-33023 โ€ผ

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38426 โ€ผ

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38436 โ€ผ

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38442 โ€ผ

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2020-8291 โ€ผ

A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-21797 โ€ผ

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger this vulnerability.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-22942 โ€ผ

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38430 โ€ผ

FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-21796 โ€ผ

An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an object containing the path to a document to be destroyed and then later reused, resulting in a use-after-free vulnerability, which can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger this vulnerability.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-38438 โ€ผ

A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary code execution.

๐Ÿ“– Read

via "National Vulnerability Database".
๐Ÿ—“๏ธ Node.js was vulnerable to a novel HTTP request smuggling technique ๐Ÿ—“๏ธ

Bad line termination and incorrect parsing of chunk extensions exposed one of two HRS flaws

๐Ÿ“– Read

via "The Daily Swig".
๐Ÿฆฟ Cybersecurity Awareness Month: Why haven't you updated your security policies? ๐Ÿฆฟ

While you're sipping that pumpkin spice latte, make sure to review your company's cybersecurity policies.

๐Ÿ“– Read

via "Tech Republic".
โŒ Twitter Suspends Accounts Used to Snare Security Researchers โŒ

The accounts were used to catfish security researchers into downloading malware in a long-running cyber-espionage campaign attributed to North Korea.

๐Ÿ“– Read

via "Threat Post".
โ€ผ CVE-2021-24752 โ€ผ

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4's configurations.

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24415 โ€ผ

The Polo Video Gallery รƒยขรขโ€šยฌรขโ‚ฌล“ Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-24702 โ€ผ

The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course settings, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltred_html capability is disallowed

๐Ÿ“– Read

via "National Vulnerability Database".
โ€ผ CVE-2021-41990 โ€ผ

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

๐Ÿ“– Read

via "National Vulnerability Database".