‼ CVE-2021-4019 ‼
📖 Read
via "National Vulnerability Database".
vim is vulnerable to Heap-based Buffer Overflow📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34599 ‼
📖 Read
via "National Vulnerability Database".
Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the certificate of the server to which the connection is made is not properly verified, the server connection is vulnerable to a man-in-the-middle attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4018 ‼
📖 Read
via "National Vulnerability Database".
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')📖 Read
via "National Vulnerability Database".
❌ Widespread ‘Smishing’ Campaign Defrauds Iranian Android Users ❌
📖 Read
via "Threat Post".
Attackers use socially engineered SMS messages and malware to compromise tens of thousands of devices and drain user bank accounts.📖 Read
via "Threat Post".
Threat Post
Widespread ‘Smishing’ Campaign Defrauds Iranian Android Users
Attackers use socially engineered SMS messages and malware to compromise tens of thousands of devices and drain user bank accounts.
‼ CVE-2021-4017 ‼
📖 Read
via "National Vulnerability Database".
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3989 ‼
📖 Read
via "National Vulnerability Database".
showdoc is vulnerable to URL Redirection to Untrusted Site📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3990 ‼
📖 Read
via "National Vulnerability Database".
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3964 ‼
📖 Read
via "National Vulnerability Database".
elgg is vulnerable to Authorization Bypass Through User-Controlled Key📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3983 ‼
📖 Read
via "National Vulnerability Database".
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3984 ‼
📖 Read
via "National Vulnerability Database".
vim is vulnerable to Heap-based Buffer Overflow📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3992 ‼
📖 Read
via "National Vulnerability Database".
kimai2 is vulnerable to Improper Access Control📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4015 ‼
📖 Read
via "National Vulnerability Database".
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3985 ‼
📖 Read
via "National Vulnerability Database".
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3994 ‼
📖 Read
via "National Vulnerability Database".
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3993 ‼
📖 Read
via "National Vulnerability Database".
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32592 ‼
📖 Read
via "National Vulnerability Database".
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.📖 Read
via "National Vulnerability Database".
🗓️ Sixth member of notorious SIM-swapping cybercrime gang sentenced 🗓️
📖 Read
via "The Daily Swig".
US crime syndicate ‘The Community’ stole millions of dollars’ worth of cryptocurrency📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Sixth member of notorious SIM-swapping cybercrime gang sentenced
US crime syndicate ‘The Community’ stole millions of dollars’ worth of cryptocurrency
⚠ Clearview AI face-matching service set to be fined over $20m ⚠
📖 Read
via "Naked Security".
Scraping data for a facial recognition service? "That's unlawful", concluded both the British and the Australians.📖 Read
via "Naked Security".
Naked Security
Clearview AI face-matching service set to be fined over $20m
Scraping data for a facial recognition service? “That’s unlawful”, concluded both the British and the Australians.
🕴 The Cyber Threats Facing Retailers This Holiday Shopping Season 🕴
📖 Read
via "Dark Reading".
With supply chain delays and an online shopping boom, attacks will come from multiple angles.📖 Read
via "Dark Reading".
Dark Reading
The Cyber Threats Facing Retailers This Holiday Shopping Season
With supply chain delays and an online shopping boom, attacks will come from multiple angles.
‼ CVE-2021-43690 ‼
📖 Read
via "National Vulnerability Database".
YurunProxy v0.01 is affected by a Cross Site Scripting (XSS) vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socket_read.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44280 ‼
📖 Read
via "National Vulnerability Database".
attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.📖 Read
via "National Vulnerability Database".