‼ CVE-2021-46446 ‼
📖 Read
via "National Vulnerability Database".
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44397 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. rtmp=start param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44403 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46447 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44371 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetEmail param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44396 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Preview param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44386 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44399 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPreset param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44378 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetEnc param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44382 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot.SetIrLights param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
⚠ Coronavirus SMS scam offers home PCR testing devices – don’t fall for it! ⚠
📖 Read
via "Naked Security".
Free home PCR devices would be technological marvels, and really useful, too. But there aren't any...📖 Read
via "Naked Security".
Naked Security
Coronavirus SMS scam offers home PCR testing devices – don’t fall for it!
Free home PCR devices would be technological marvels, and really useful, too. But there aren’t any…
📢 Podcast transcript: Inside the DDoS arms race 📢
📖 Read
via "ITPro".
Read the full transcript for this episode of the IT Pro Podcast📖 Read
via "ITPro".
IT PRO
Podcast transcript: Inside the DDoS arms race | IT PRO
Read the full transcript for this episode of the IT Pro Podcast
📢 The IT Pro Podcast: Inside the DDoS arms race 📢
📖 Read
via "ITPro".
They’re still among the most common cyber attacks - but what makes DDoS so popular?📖 Read
via "ITPro".
IT PRO
The IT Pro Podcast: Inside the DDoS arms race | IT PRO
They’re still among the most common cyber attacks - but what makes DDoS so popular?
📢 Report: IT staff fail phishing tests more often than non-technical workers 📢
📖 Read
via "ITPro".
Results show DevOps workers consistently rank among the most likely to fail a cyber security exercise📖 Read
via "ITPro".
IT PRO
Report: IT staff fail phishing tests more often than non-technical workers | IT PRO
Results show DevOps workers consistently rank among the most likely to fail a cyber security exercise
‼ CVE-2022-24122 ‼
📖 Read
via "National Vulnerability Database".
kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.📖 Read
via "National Vulnerability Database".
♟️ Fake Investor John Bernard Sinks Norwegian Green Shipping Dreams ♟️
📖 Read
via "Krebs on Security".
Several articles here have delved into the history of John Bernard, the pseudonym used by a fake billionaire technology investor who's tricked dozens of start-ups into giving him tens of millions of dollars. Bernard's latest victim -- a Norwegian startup hoping to build a fleet of environmentally friendly shipping vessels -- is now embroiled in a lawsuit over a deal gone bad, in which Bernard falsely claimed to have secured $100 million from six other wealthy investors, including the founder of Uber and the artist Abel Makkonen Tesfaye, better known as The Weeknd.📖 Read
via "Krebs on Security".
Krebsonsecurity
Fake Investor John Bernard Sinks Norwegian Green Shipping Dreams
Several articles here have delved into the history of John Bernard, the pseudonym used by a fake billionaire technology investor who's tricked dozens of start-ups into giving him tens of millions of dollars. Bernard's latest victim -- a Norwegian startup…
‼ CVE-2021-46660 ‼
📖 Read
via "National Vulnerability Database".
Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46659 ‼
📖 Read
via "National Vulnerability Database".
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46658 ‼
📖 Read
via "National Vulnerability Database".
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46657 ‼
📖 Read
via "National Vulnerability Database".
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24123 ‼
📖 Read
via "National Vulnerability Database".
MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload.📖 Read
via "National Vulnerability Database".