πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2021-46548 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mjs_bcode.c. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46547 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46556 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_bcode_insert_offset at src/mjs_bcode.c. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46546 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_next at src/mjs_object.c. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46553 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46527 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46542 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_print at src/mjs_builtin.c. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46537 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46550 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46543 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e810. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46534 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getprop_builtin_foreign at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46544 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x59e19. This vulnerability can lead to a Denial of Service (DoS).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46526 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-46521 β€Ό

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Phishing Simulation Study Shows Why These Attacks Remain Pervasive πŸ•΄

E-mail purportedly from human resources convinced more than one-fifth of recipients to click, the majority of whom did so within an hour of receiving the fraudulent message.

πŸ“– Read

via "Dark Reading".
πŸ“’ NCSC project will help UK businesses identify security vulnerabilities πŸ“’

The scripts will be developed and reviewed regularly to target the most pervasive issues in enterprise security

πŸ“– Read

via "ITPro".
πŸ“’ Vodafone: Personal data might become new currency by 2030 πŸ“’

Businesses will be forced to provide customers with a better experience in exchange for personal data in order to retain them

πŸ“– Read

via "ITPro".
πŸ“’ Apple fixes array of iOS, macOS zero-days and code execution security flaws πŸ“’

The first wave of security updates for Apple products in 2022 follows a year in which a wide variety of security flaws plagued its portfolio of devices

πŸ“– Read

via "ITPro".
πŸ“’ 12-year-old Linux root privilege flaw has been "hiding in plain sight" πŸ“’

Researchers were quick to highlight how easy it was to exploit the vulnerability, recommending urgent patches

πŸ“– Read

via "ITPro".
β€Ό CVE-2022-21719 β€Ό

GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9.5.7 contains a patch for this issue. There are no known workarounds.

πŸ“– Read

via "National Vulnerability Database".
πŸ—“οΈ Privacy slalom: Human rights, media orgs offer OPSEC warning to Winter Olympics attendees πŸ—“οΈ

Behind the spectacle of Beijing 2022, visitors’ digital freedoms may be left out in the cold

πŸ“– Read

via "The Daily Swig".