‼ CVE-2021-42717 ‼
📖 Read
via "National Vulnerability Database".
ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests. Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly vulnerable: the affected versions include 2.8.0 through 2.9.4.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40578 ‼
📖 Read
via "National Vulnerability Database".
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38759 ‼
📖 Read
via "National Vulnerability Database".
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42683 ‼
📖 Read
via "National Vulnerability Database".
A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42567 ‼
📖 Read
via "National Vulnerability Database".
Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43963 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain write access. (This issue does not affect clusters where Sync Gateway is authenticated with X.509 client certificates. This issue also does not affect clusters where shared bucket access is not enabled on Sync Gateway.)📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42681 ‼
📖 Read
via "National Vulnerability Database".
A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42682 ‼
📖 Read
via "National Vulnerability Database".
An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43810 ‼
📖 Read
via "National Vulnerability Database".
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts. This issue is patched in version 4.0.12.📖 Read
via "National Vulnerability Database".
🕴 New Financial Services Industry Report Reveals Major Gaps in Storage and Backup Security 🕴
📖 Read
via "Dark Reading".
More than two-Thirds (69%) of respondents believe an attack on their storage & backup environment will have "significant" or "catastrophic" impact.📖 Read
via "Dark Reading".
Dark Reading
New Financial Services Industry Report Reveals Major Gaps in Storage and Backup Security
More than two-Thirds (69%) of respondents believe an attack on their storage & backup environment will have "significant" or "catastrophic" impact.
📢 More than 90% of IT decision makers reuse passwords 📢
📖 Read
via "ITPro".
Bitwarden survey also finds that half of IT professionals share their passwords with colleagues📖 Read
via "ITPro".
IT PRO
More than 90% of IT decision makers reuse passwords | IT PRO
Bitwarden survey also finds that half of IT professionals share their passwords with colleagues
📢 Access brokers are making it easier for ransomware operators to attack businesses 📢
📖 Read
via "ITPro".
A new business model has been uncovered that makes it much easier for attackers to gain access to business' networks📖 Read
via "ITPro".
IT PRO
Access brokers are making it easier for ransomware operators to attack businesses | IT PRO
A new business model has been uncovered that makes it much easier for attackers to gain access to business' networks
📢 UK and Singapore align closer on digital trade 📢
📖 Read
via "ITPro".
Three agreements have been signed which focus on facilitating digital trade, cyber security, and digital identities between the two nations📖 Read
via "ITPro".
IT PRO
UK and Singapore align closer on digital trade | IT PRO
Three agreements have been signed which focus on facilitating digital trade, cyber security, and digital identities between the two nations
📢 What is SSID? 📢
📖 Read
via "ITPro".
We look at what SSID is and how it is used to connect devices to the internet📖 Read
via "ITPro".
IT PRO
What is SSID? | IT PRO
We look at what SSID is and how it is used to connect devices to the internet
📢 RNLI takes website offline after suspected cyber attack 📢
📖 Read
via "ITPro".
The charity has not linked the incident to the recent pressure campaign from Britain First📖 Read
via "ITPro".
IT PRO
RNLI takes website offline after suspected cyber attack | IT PRO
The charity has not linked the incident to the recent pressure campaign from Britain First
📢 How to boot Windows 11 in Safe Mode 📢
📖 Read
via "ITPro".
Unless you’re a complete Windows 11 novice, you’ll have come across Safe Mode before - but what exactly is it, and how do you access it in Windows 11?📖 Read
via "ITPro".
ITPro
How to boot into Windows 11 Safe Mode
Long-time Windows users will already be familiar with Windows 11 Safe Mode, but what exactly is it for and how do you boot your system into it?
📢 IT Pro 20/20: The problem with diversity in cyber security leadership 📢
📖 Read
via "ITPro".
Why failing to address a shortage of women in senior roles puts businesses at risk - issue 23 is available to download now📖 Read
via "ITPro".
IT PRO
IT Pro 20/20: The problem with diversity in cyber security leadership | IT PRO
Why failing to address a shortage of women in senior roles puts businesses at risk - issue 23 is available to download now
📢 Data protection policies and procedures 📢
📖 Read
via "ITPro".
Why your company needs them, and what they should include📖 Read
via "ITPro".
IT PRO
Data protection policies and procedures | IT PRO
Why your company needs them, and what they should include
📢 BitMart suspends withdrawals following hack 📢
📖 Read
via "ITPro".
Hackers managed to get away with at least $150 million (£113 million) in cryptocurrencies📖 Read
via "ITPro".
IT PRO
BitMart suspends withdrawals following hack | IT PRO
Hackers managed to get away with at least $150 million (£113 million) in cryptocurrencies
📢 IT Pro News In Review: Cyber attack at Ikea, Meta ordered to sell Giphy, new Twitter CEO 📢
📖 Read
via "ITPro".
Catch up on the biggest headlines of the week in just two minutes📖 Read
via "ITPro".
IT PRO
IT Pro News In Review: Cyber attack at Ikea, Meta ordered to sell Giphy, new Twitter CEO
Catch up on the biggest headlines of the week in just two minutes