‼ CVE-2021-44382 ‼
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot.SetIrLights param is not object. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
⚠ Coronavirus SMS scam offers home PCR testing devices – don’t fall for it! ⚠
📖 Read
via "Naked Security".
Free home PCR devices would be technological marvels, and really useful, too. But there aren't any...📖 Read
via "Naked Security".
Naked Security
Coronavirus SMS scam offers home PCR testing devices – don’t fall for it!
Free home PCR devices would be technological marvels, and really useful, too. But there aren’t any…
📢 Podcast transcript: Inside the DDoS arms race 📢
📖 Read
via "ITPro".
Read the full transcript for this episode of the IT Pro Podcast📖 Read
via "ITPro".
IT PRO
Podcast transcript: Inside the DDoS arms race | IT PRO
Read the full transcript for this episode of the IT Pro Podcast
📢 The IT Pro Podcast: Inside the DDoS arms race 📢
📖 Read
via "ITPro".
They’re still among the most common cyber attacks - but what makes DDoS so popular?📖 Read
via "ITPro".
IT PRO
The IT Pro Podcast: Inside the DDoS arms race | IT PRO
They’re still among the most common cyber attacks - but what makes DDoS so popular?
📢 Report: IT staff fail phishing tests more often than non-technical workers 📢
📖 Read
via "ITPro".
Results show DevOps workers consistently rank among the most likely to fail a cyber security exercise📖 Read
via "ITPro".
IT PRO
Report: IT staff fail phishing tests more often than non-technical workers | IT PRO
Results show DevOps workers consistently rank among the most likely to fail a cyber security exercise
‼ CVE-2022-24122 ‼
📖 Read
via "National Vulnerability Database".
kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.📖 Read
via "National Vulnerability Database".
♟️ Fake Investor John Bernard Sinks Norwegian Green Shipping Dreams ♟️
📖 Read
via "Krebs on Security".
Several articles here have delved into the history of John Bernard, the pseudonym used by a fake billionaire technology investor who's tricked dozens of start-ups into giving him tens of millions of dollars. Bernard's latest victim -- a Norwegian startup hoping to build a fleet of environmentally friendly shipping vessels -- is now embroiled in a lawsuit over a deal gone bad, in which Bernard falsely claimed to have secured $100 million from six other wealthy investors, including the founder of Uber and the artist Abel Makkonen Tesfaye, better known as The Weeknd.📖 Read
via "Krebs on Security".
Krebsonsecurity
Fake Investor John Bernard Sinks Norwegian Green Shipping Dreams
Several articles here have delved into the history of John Bernard, the pseudonym used by a fake billionaire technology investor who's tricked dozens of start-ups into giving him tens of millions of dollars. Bernard's latest victim -- a Norwegian startup…
‼ CVE-2021-46660 ‼
📖 Read
via "National Vulnerability Database".
Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46659 ‼
📖 Read
via "National Vulnerability Database".
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46658 ‼
📖 Read
via "National Vulnerability Database".
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46657 ‼
📖 Read
via "National Vulnerability Database".
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24123 ‼
📖 Read
via "National Vulnerability Database".
MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24124 ‼
📖 Read
via "National Vulnerability Database".
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0273 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in Pypi calibreweb prior to 0.6.16.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0339 ‼
📖 Read
via "National Vulnerability Database".
Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.📖 Read
via "National Vulnerability Database".
🔥1
‼ CVE-2022-0407 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in Conda vim prior to 8.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0408 ‼
📖 Read
via "National Vulnerability Database".
Stack-based Buffer Overflow in Conda vim prior to 8.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0413 ‼
📖 Read
via "National Vulnerability Database".
Use After Free in Conda vim prior to 8.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-23520 ‼
📖 Read
via "National Vulnerability Database".
The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0414 ‼
📖 Read
via "National Vulnerability Database".
Business Logic Errors in Packagist dolibarr/dolibarr prior to 16.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-23521 ‼
📖 Read
via "National Vulnerability Database".
This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In some cases, this can allow an attacker to execute arbitrary code. The vulnerable code is in the ZipFile::uncompressEntry function in juce_ZipFile.cpp and is executed when the archive is extracted upon calling uncompressTo() on a ZipFile object.📖 Read
via "National Vulnerability Database".