‼ CVE-2021-43038 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account could execute commands by injecting into PostgreSQL trigger functions. This allowed privilege escalation from the wguest user to the postgres user.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43039 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43037 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43042 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This was exploitable by a remote unauthenticated attacker.📖 Read
via "National Vulnerability Database".
🗓️ Crypto-exchange BitMart reports $150 million theft following hack 🗓️
📖 Read
via "The Daily Swig".
Security firm said attackers executed a ‘transfer-out, swap, and wash’📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Crypto-exchange BitMart reports $150 million theft following hack
Security firm said attackers executed a ‘transfer-out, swap, and wash’
‼ CVE-2021-43469 ‼
📖 Read
via "National Vulnerability Database".
VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component.📖 Read
via "National Vulnerability Database".
⚠ Mozilla patches critical “BigSig” cryptographic bug: Here’s how to track it down and fix it ⚠
📖 Read
via "Naked Security".
Mozilla's cryptographic code had a critical bug. Problem is that numerous apps are affected and may need patching individually.📖 Read
via "Naked Security".
Naked Security
Mozilla patches critical “BigSig” cryptographic bug: Here’s how to track it down and fix it
Mozilla’s cryptographic code had a critical bug. Problem is that numerous apps are affected and may need patching individually.
‼ CVE-2021-43471 ‼
📖 Read
via "National Vulnerability Database".
In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability.📖 Read
via "National Vulnerability Database".
🕴 Why the C-Suite Doesn't Need Access to All Corporate Data 🕴
📖 Read
via "Dark Reading".
If zero trust is to work properly, then it must apply to everyone.📖 Read
via "Dark Reading".
Dark Reading
Why the C-Suite Doesn't Need Access to All Corporate Data
If zero trust is to work properly, then it must apply to everyone.
🦿 How to lock a Zoom meeting to keep out unwanted guests 🦿
📖 Read
via "Tech Republic".
One good way to prevent unwelcome participants or late arrivals from joining your Zoom meetings is to lock those meetings. Here's a look at how it's done.📖 Read
via "Tech Republic".
TechRepublic
How to lock a Zoom meeting to keep out unwanted guests | TechRepublic
One good way to prevent unwelcome participants or late arrivals from joining your Zoom meetings is to lock those meetings. Here's a look at how it's done.
🗓️ Critical vulnerabilities in open source forum software NodeBB could lead to RCE 🗓️
📖 Read
via "The Daily Swig".
Personal data, account access is at risk📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Critical vulnerabilities in open source forum software NodeBB could lead to RCE
Personal data, account access is at risk
⚠ Cryptocurrency startup fails to subtract before adding, loses $31m ⚠
📖 Read
via "Naked Security".
Think of a number, any number. Take away 42. Add 42 back in. Then pretend you didn't take away 42. How much is left?📖 Read
via "Naked Security".
Naked Security
Cryptocurrency startup fails to subtract before adding, loses $31m
Think of a number, any number. Take away 42. Add 42 back in. Then pretend you didn’t take away 42. How much is left?
❌ Pegasus Spyware Infects U.S. State Department iPhones ❌
📖 Read
via "Threat Post".
It's unknown who's behind the cyberattacks against at least nine employees' iPhones, who are all involved in Ugandan diplomacy.📖 Read
via "Threat Post".
Threat Post
Pegasus Spyware Infects U.S. State Department iPhones
It's unknown who's behind the cyberattacks against at least nine employees' iPhones, who are all involved in Ugandan diplomacy.
🗓️ Web security bugs discovered in CATIE assisted living framework 🗓️
📖 Read
via "The Daily Swig".
Care home communications tool conundrum📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Web security bugs discovered in CATIE assisted living framework
Care home communications tool conundrum
‼ CVE-2021-24931 ‼
📖 Read
via "National Vulnerability Database".
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-24938 ‼
📖 Read
via "National Vulnerability Database".
The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocs_update_profiles_data AJAX action (available to any authenticated user) before outputting it back in the response, leading to a Reflected cross-Site Scripting issue📖 Read
via "National Vulnerability Database".
‼ CVE-2021-24917 ‼
📖 Read
via "National Vulnerability Database".
The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25041 ‼
📖 Read
via "National Vulnerability Database".
The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2021-24939 ‼
📖 Read
via "National Vulnerability Database".
The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue📖 Read
via "National Vulnerability Database".
‼ CVE-2021-24759 ‼
📖 Read
via "National Vulnerability Database".
The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks📖 Read
via "National Vulnerability Database".