‼ CVE-2021-32483 ‼
📖 Read
via "National Vulnerability Database".
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-30132 ‼
📖 Read
via "National Vulnerability Database".
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-29243 ‼
📖 Read
via "National Vulnerability Database".
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-22051 ‼
📖 Read
via "National Vulnerability Database".
Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-37850 ‼
📖 Read
via "National Vulnerability Database".
ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32481 ‼
📖 Read
via "National Vulnerability Database".
Cloudera Hue 4.6.0 allows XSS via the type parameter.📖 Read
via "National Vulnerability Database".
🕴 Valeo Networks Acquires On Time Tech, Accelerating National Growth Strategy 🕴
📖 Read
via "Dark Reading".
Through this latest acquisition, the company adds two more California locations.📖 Read
via "Dark Reading".
Dark Reading
Valeo Networks Acquires On Time Tech, Accelerating National Growth Strategy
Through this latest acquisition, the company adds two more California locations.
🗓️ Mozilla disables ‘low usage’ encryption feature to resolve Thunderbird HTTP/2 vulnerability 🗓️
📖 Read
via "The Daily Swig".
Multiple flaws in email client resolved with security update📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Mozilla disables ‘low usage’ encryption feature to resolve Thunderbird HTTP/2 vulnerability
Multiple flaws in email client resolved with security update
❌ Zoho Password Manager Flaw Torched by Godzilla Webshell ❌
📖 Read
via "Threat Post".
A new campaign is prying apart a known security vulnerability in the Zoho ManageEngine ADSelfService Plus password manager, researchers warned over the weekend. The threat actors have managed to exploit the Zoho weakness in at least nine global entities across critical sectors so far (technology, defense, healthcare, energy and education), deploying the Godzilla webshell and […]📖 Read
via "Threat Post".
Threat Post
Zoho’s ManageEngine Password Manager Flaw Torched by Godzilla Webshell
Researchers have spotted a second, worldwide campaign exploiting the ManagedEngine SelfServiceAD Plus zero-day: one that’s breached defense, energy and healthcare organizations.
🕴 Arctic Wolf Security Operations Cloud Reaches Massive Scale and a Global Footprint 🕴
📖 Read
via "Dark Reading".
Global business momentum and technical advancements position the Arctic Wolf platform as a category-defining Security Operations solution📖 Read
via "Dark Reading".
Dark Reading
Arctic Wolf Security Operations Cloud Reaches Massive Scale and a Global Footprint
Global business momentum and technical advancements position the Arctic Wolf platform as a category-defining Security Operations solution
🕴 Kaspersky Finds DDoS Attacks in Q3 Grow by 24%, Become More Sophisticated 🕴
📖 Read
via "Dark Reading".
The total number of smart attacks (advanced DDoS attacks that are often targeted) increased by 31% when compared to the same period last year.📖 Read
via "Dark Reading".
Dark Reading
Kaspersky Finds DDoS Attacks in Q3 Grow by 24%, Become More Sophisticated
The total number of smart attacks (advanced DDoS attacks that are often targeted) increased by 31% when compared to the same period last year.
🕴 Banking Malware Threats Surging as Mobile Banking Increases – Nokia Threat Intelligence Report 🕴
📖 Read
via "Dark Reading".
The Nokia 2021 Threat Intelligence Report announced today shows that banking malware threats are sharply increasing as cyber criminals target the rising popularity of mobile banking on smartphones, with plots aimed at stealing personal banking credentials and credit card information.📖 Read
via "Dark Reading".
Dark Reading
Banking Malware Threats Surging as Mobile Banking Increases – Nokia Threat Intelligence Report
The Nokia 2021 Threat Intelligence Report announced today shows that banking malware threats are sharply increasing as cyber criminals target the rising popularity of mobile banking on smartphones, with plots aimed at stealing personal banking credentials…
‼ CVE-2021-41733 ‼
📖 Read
via "National Vulnerability Database".
Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28023 ‼
📖 Read
via "National Vulnerability Database".
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28024 ‼
📖 Read
via "National Vulnerability Database".
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25979 ‼
📖 Read
via "National Vulnerability Database".
Apostrophe CMS versions between 2.63.0 to 3.3.1 affected by an insufficient session expiration vulnerability, which allows unauthenticated remote attackers to hijack recently logged-in users' sessions.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42770 ‼
📖 Read
via "National Vulnerability Database".
A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28022 ‼
📖 Read
via "National Vulnerability Database".
Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-39182 ‼
📖 Read
via "National Vulnerability Database".
EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`.📖 Read
via "National Vulnerability Database".
🗓️ Pwn2Own Austin 2021: Synacktiv crowned Masters of Pwn after Sonos One, WD NAS exploits 🗓️
📖 Read
via "The Daily Swig".
French team takes home nearly $200k in winnings as event uncovers 61 zero days📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Pwn2Own Austin 2021: Synacktiv crowned Masters of Pwn after Sonos One, WD NAS exploits
French team takes home nearly $200k in winnings as event uncovers 61 zero days