‼ CVE-2022-0417 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in Conda vim prior to 8.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-24983 ‼
📖 Read
via "National Vulnerability Database".
The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading to a Reflected Cross-Site Scripting issue📖 Read
via "National Vulnerability Database".
🗓️ SureMDM bug chain enabled wholesale compromise of managed devices 🗓️
📖 Read
via "The Daily Swig".
Series of flaws in MDM platform addressed in web console and Linux agent📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
SureMDM bug chain enabled wholesale compromise of managed devices
Series of flaws in MDM platform addressed in web console and Linux agent
🕴 Mastercard Launches Global Cybersecurity Alliance Program to Further Secure The Digital Ecosystem 🕴
📖 Read
via "Dark Reading".
New program helps partners accelerate growth and provide scaled delivery of critical cybersecurity and risk services.📖 Read
via "Dark Reading".
Dark Reading
Mastercard Launches Global Cybersecurity Alliance Program to Further Secure The Digital Ecosystem
New program helps partners accelerate growth and provide scaled delivery of critical cybersecurity and risk services.
🕴 Qualys Adds Advanced Remediation Capabilities to Minimize Vulnerability Risk 🕴
📖 Read
via "Dark Reading".
Update to Qualys Cloud Platform enables organizations to fix asset misconfigurations in addition to patching to achieve comprehensive remediation.📖 Read
via "Dark Reading".
Dark Reading
Qualys Adds Advanced Remediation Capabilities to Minimize Vulnerability Risk
Update to Qualys Cloud Platform enables organizations to fix asset misconfigurations in addition to patching to achieve comprehensive remediation.
🗓️ Critical Samba flaw presents code execution threat 🗓️
📖 Read
via "The Daily Swig".
Urgent patching of file-sharing technology urged📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Critical Samba flaw presents code execution threat
Urgent patching of file-sharing technology urged
‼ CVE-2021-38560 ‼
📖 Read
via "National Vulnerability Database".
Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44746 ‼
📖 Read
via "National Vulnerability Database".
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can access to the internal network, the configuration information may be obtained.📖 Read
via "National Vulnerability Database".
⚠ Website operator fined for using Google Fonts “the cloudy way” ⚠
📖 Read
via "Naked Security".
Google Fonts are OK, it seems, but only if everyone keeps their own copy of the fonts they use.📖 Read
via "Naked Security".
Naked Security
Website operator fined for using Google Fonts “the cloudy way”
Google Fonts are OK, it seems, but only if everyone keeps their own copy of the fonts they use.
🕴 Complexity vs. Capability: How to Bridge the Security Effectiveness Gap 🕴
📖 Read
via "Dark Reading".
Consolidation and automation are among the strategies for balancing security complexity and capability.📖 Read
via "Dark Reading".
Dark Reading
Complexity vs. Capability: How to Bridge the Security Effectiveness Gap
Consolidation and automation are among the strategies for balancing security complexity and capability.
⚠ Linux kernel patches “performance can be harmful” bug in video driver ⚠
📖 Read
via "Naked Security".
This bug is fiendishly hard to exploit - but if you patch, it won't be there to exploit at all.📖 Read
via "Naked Security".
Naked Security
Linux kernel patches “performance can be harmful” bug in video driver
This bug is fiendishly hard to exploit – but if you patch, it won’t be there to exploit at all.
🕴 7 Red Flags That Can Stop Your Company From Becoming a Unicorn 🕴
📖 Read
via "Dark Reading".
Investors and venture capitalists share the reasons that make them turn away from investing in your security tech.📖 Read
via "Dark Reading".
Dark Reading
7 Red Flags That Can Stop Your Company From Becoming a Unicorn
Investors and venture capitalists share the reasons that make them turn away from investing in your security tech.
❌ Samba ‘Fruit’ Bug Allows RCE, Full Root User Access ❌
📖 Read
via "Threat Post".
The issue in the file-sharing and interop platform also affects Red Hat, SUSE Linux and Ubuntu packages.📖 Read
via "Threat Post".
Threat Post
Samba ‘Fruit’ Bug Allows RCE, Full Root User Access
The issue in the file-sharing and interop platform also affects Red Hat, SUSE Linux and Ubuntu packages.
❌ The Account Takeover Cat-and-Mouse Game ❌
📖 Read
via "Threat Post".
ATO attacks are evolving. Jason Kent, hacker-in-residence at Cequence Security, discusses what new-style cyberattacks look like in the wild.📖 Read
via "Threat Post".
Threat Post
The Account Takeover Cat-and-Mouse Game
ATO attacks are evolving. Jason Kent, hacker-in-residence at Cequence Security, discusses what new-style cyberattacks look like in the wild.
‼ CVE-2022-24220 ‼
📖 Read
via "National Vulnerability Database".
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24198 ‼
📖 Read
via "National Vulnerability Database".
iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24196 ‼
📖 Read
via "National Vulnerability Database".
iText v7.1.17 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24223 ‼
📖 Read
via "National Vulnerability Database".
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24222 ‼
📖 Read
via "National Vulnerability Database".
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24219 ‼
📖 Read
via "National Vulnerability Database".
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24197 ‼
📖 Read
via "National Vulnerability Database".
iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.📖 Read
via "National Vulnerability Database".