πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2021-3704 β€Ό

Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-38847 β€Ό

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-3440 β€Ό

HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevation of privilege.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-27005 β€Ό

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-29212 β€Ό

A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-3705 β€Ό

Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigure, reset the device.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-29213 β€Ό

A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitive information, denial of service (DoS), and/or compromise system integrity.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-28702 β€Ό

A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.

πŸ“– Read

via "National Vulnerability Database".
❌ β€˜Trojan Source’ Hides Invisible Bugs in Source Code ❌

The old RLO trick of exploiting how Unicode handles script ordering and a related homoglyph attack can imperceptibly switch the real name of malware.

πŸ“– Read

via "Threat Post".
πŸ—“οΈ Multiple flaws in telecoms stack software FreeSwitch uncovered πŸ—“οΈ

Authentication and denial of service risks for DIY PBX tech patched

πŸ“– Read

via "The Daily Swig".
πŸ•΄ Name That Edge Toon: Parting Thoughts πŸ•΄

Feeling creative? Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-26740 β€Ό

Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-26739 β€Ό

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter.

πŸ“– Read

via "National Vulnerability Database".
πŸ” Virtual Conferencing Software Must Improve Data Protection, Regulators Warn πŸ”

Following an investigation, six countries and four companies outlined best practices for mitigating privacy risks in video conferencing apps.

πŸ“– Read

via "".
β€Ό CVE-2021-42917 β€Ό

Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream.

πŸ“– Read

via "National Vulnerability Database".
❌ Pirate Sports Streamer Gets Busted, Pivots to MLB Extortion ❌

An alleged sports content pirate is accused of not only hijacking leagues' streams but also threatening to tell reporters how he accessed their systems.

πŸ“– Read

via "Threat Post".
πŸ•΄ Free Tool Scans Web Servers for Vulnerability to HTTP Header-Smuggling Attacks πŸ•΄

A researcher will release an open source tool at Black Hat Europe next week that roots out server weaknesses to a sneaky type of attack.

πŸ“– Read

via "Dark Reading".
πŸ•΄ SonicWall: 'The Year of Ransomware' Continues with Unprecedented Late-Summer Surge πŸ•΄

2021 will be the most costly and dangerous year on record.

πŸ“– Read

via "Dark Reading".
πŸ•΄ New 'Trojan Source' Method Lets Attackers Hide Vulns in Source Code πŸ•΄

Researchers discover a new technique attackers could use to encode vulnerabilities into software while evading detection.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Zscaler’s 2021 Encrypted Attacks Report Reveals 314% Spike in HTTPS Threats πŸ•΄

Massive increase in cyberattacks targeting technology and retail industries confirms immediate need for zero-trust security

πŸ“– Read

via "Dark Reading".
πŸ•΄ CISA and Partners Coordinate on Security, Combatting Misinformation for Election Day πŸ•΄

CISA will host an election situational awareness room to coordinate with federal partners, state and local election officials, private sector election partners, and political organizations to share real-time information and provide support as needed.

πŸ“– Read

via "Dark Reading".