βΌ CVE-2022-23632 βΌ
π Read
via "National Vulnerability Database".
Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer security (TLS) configuration when the host header is a fully qualified domain name (FQDN). For a request, the TLS configuration choice can be different than the router choice, which implies the use of a wrong TLS configuration. When sending a request using FQDN handled by a router configured with a dedicated TLS configuration, the TLS configuration falls back to the default configuration that might not correspond to the configured one. If the CNAME flattening is enabled, the selected TLS configuration is the SNI one and the routing uses the CNAME value, so this can skip the expected TLS configuration. Version 2.6.1 contains a patch for this issue. As a workaround, one may add the FDQN to the host rule. However, there is no workaround if the CNAME flattening is enabled.π Read
via "National Vulnerability Database".
β S3 Ep70: Bitcoin, billing blunders, and 0-day after 0-day after 0-day [Podcast + Transcript] β
π Read
via "Naked Security".
Latest episode - listen and learn!π Read
via "Naked Security".
Naked Security
S3 Ep70: Bitcoin, billing blunders, and 0-day after 0-day after 0-day [Podcast + Transcript]
Latest episode β listen and learn!
β Baby Golang-Based Botnet Already Pulling in $3K/Month for Operators β
π Read
via "Threat Post".
Kraken has already spread like wildfire, but in the past few months, the malware's author has been tinkering away, adding more infostealers and backdoors.π Read
via "Threat Post".
Threat Post
Baby Golang-Based Botnet Already Pulling in $3K/Month for Operators
Newborn as it is, the Kraken botnet has already spread like wildfire, thanks to the malware's author tinkering away over the past few months, adding more infostealers and backdoors.
π΄ Software-Developer Security Vendor Snyk Buys Cloud Security Company π΄
π Read
via "Dark Reading".
Acquisition helps expand Snyk into the cloud security sector.π Read
via "Dark Reading".
Dark Reading
Software-Developer Security Vendor Snyk Buys Cloud Security Company
Acquisition helps expand Snyk into the cloud security sector.
βΌ CVE-2022-24683 βΌ
π Read
via "National Vulnerability Database".
HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec (or job-submit) capabilities to read arbitrary files on the host filesystem as root.π Read
via "National Vulnerability Database".
βΌ CVE-2021-39034 βΌ
π Read
via "National Vulnerability Database".
IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID: 213964.π Read
via "National Vulnerability Database".
βΌ CVE-2022-0638 βΌ
π Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.π Read
via "National Vulnerability Database".
βΌ CVE-2022-0639 βΌ
π Read
via "National Vulnerability Database".
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.π Read
via "National Vulnerability Database".
π΄ Security Teams Expect Attackers to Go After End Users First π΄
π Read
via "Dark Reading".
Phishing, malware, and ransomware have spurred organizations to increase their investments in endpoint security, according to Dark Readingβs Endpoint Security Survey.π Read
via "Dark Reading".
Dark Reading
Security Teams Expect Attackers to Go After End Users First
Phishing, malware, and ransomware have spurred organizations to increase their investments in endpoint security, according to Dark Readingβs Endpoint Security Survey.
π΄ Confluera Cloud Research Finds Cybersecurity Concern as Biggest Obstacle to Cloud and Multicloud Adoption π΄
π Read
via "Dark Reading".
Meanwhile, 84% of IT leaders are optimistic about their cybersecurity readiness for 2022.π Read
via "Dark Reading".
Dark Reading
Confluera Cloud Research Finds Cybersecurity Concern as Biggest Obstacle to Cloud and Multicloud Adoption
Meanwhile, 84% of IT leaders are optimistic about their cybersecurity readiness for 2022.
π΄ Attackers Hone Their Playbooks, Become More Agile π΄
π Read
via "Dark Reading".
Less malware, more interactive intrusions, and big game hunting lead to more success, with an 82% increase in ransomware-related data leaks.π Read
via "Dark Reading".
Dark Reading
Attackers Hone Their Playbooks, Become More Agile
Less malware, more interactive intrusions, and big game hunting lead to more success, with an 82% increase in ransomware-related data leaks.
π΄ Darktrace Artificial Intelligence Stops Cyberattack at Italian Electronics Distributor π΄
π Read
via "Dark Reading".
Vulnerability allows attackers to run arbitrary commands, including the ability to delete, modify, and exfiltrate private source code.π Read
via "Dark Reading".
Dark Reading
Darktrace Artificial Intelligence Stops Cyberattack at Italian Electronics Distributor
Vulnerability allows attackers to run arbitrary commands, including the ability to delete, modify, and exfiltrate private source code.
π΄ Neustar Security Services Report Highlights Shifts in Threat Landscape Amid Maturing Cybercrime Economy π΄
π Read
via "Dark Reading".
Carpet bombing attacks increase sharply in 2021, along with complex multivector attacks.π Read
via "Dark Reading".
Dark Reading
Neustar Security Services Report Highlights Shifts in Threat Landscape Amid Maturing Cybercrime Economy
Carpet bombing attacks increase sharply in 2021, along with complex multivector attacks.
π΄ NSA Issues Guidance for Selecting Strong Cisco Password Types π΄
π Read
via "Dark Reading".
Poorly protected passwords in device configuration files present a risk of compromise, agency says.π Read
via "Dark Reading".
Dark Reading
NSA Issues Guidance for Selecting Strong Cisco Password Types
National Security Agency (NSA) has issued fresh guidance for organizations on selecting strong passwords for Cisco devices citing an increase in compromises.
βΌ CVE-2022-22914 βΌ
π Read
via "National Vulnerability Database".
An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal.π Read
via "National Vulnerability Database".
βΌ CVE-2021-45382 βΌ
π Read
via "National Vulnerability Database".
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.π Read
via "National Vulnerability Database".
βΌ CVE-2021-46319 βΌ
π Read
via "National Vulnerability Database".
Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.This vulnerability is due to the fact that CVE-2019-17509 is not fully patched and can be bypassed by using line breaks or backticks on its basis.π Read
via "National Vulnerability Database".
βΌ CVE-2021-46314 βΌ
π Read
via "National Vulnerability Database".
A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name.π Read
via "National Vulnerability Database".
βΌ CVE-2022-22916 βΌ
π Read
via "National Vulnerability Database".
O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.π Read
via "National Vulnerability Database".
βΌ CVE-2022-23646 βΌ
π Read
via "National Vulnerability Database".
Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface (UI) Misrepresentation of Critical Information. In order to be affected, the `next.config.js` file must have an `images.domains` array assigned and the image host assigned in `images.domains` must allow user-provided SVG. If the `next.config.js` file has `images.loader` assigned to something other than default, the instance is not affected. Version 12.1.0 contains a patch for this issue. As a workaround, change `next.config.js` to use a different `loader configuration` other than the default.π Read
via "National Vulnerability Database".
βΌ CVE-2021-46315 βΌ
π Read
via "National Vulnerability Database".
Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters to cause arbitrary command execution. Since CVE-2019-17510 vulnerability has not been patched and improved www/hnap1/control/setwizardconfig.php, can also use line breaks and backquotes to bypass.π Read
via "National Vulnerability Database".