‼ CVE-2022-25326 ‼
📖 Read
via "National Vulnerability Database".
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24594 ‼
📖 Read
via "National Vulnerability Database".
In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.📖 Read
via "National Vulnerability Database".
🕴 Putting the X Factor in XDR 🕴
📖 Read
via "Dark Reading".
While extended detection and response (XDR) is effectively considered an upgrade from endpoint detection and response, enterprises must still begin with a strong EDR foundation.📖 Read
via "Dark Reading".
Dark Reading
Putting the X Factor in XDR
While extended detection and response (XDR) is effectively considered an upgrade from endpoint detection and response, enterprises must still begin with a strong EDR foundation.
🕴 The Future of Cyber Insurance 🕴
📖 Read
via "Dark Reading".
Having cyber insurance is a good idea if the costs make sense — it could be the difference between going out of business and staying afloat. But it shouldn't be your first course of action.📖 Read
via "Dark Reading".
Dark Reading
The Future of Cyber Insurance
Having cyber insurance is a good idea if the costs make sense — it could be the difference between going out of business and staying afloat. But it shouldn't be your first course of action.
‼ CVE-2022-25374 ‼
📖 Read
via "National Vulnerability Database".
HashiCorp Terraform Enterprise before 202202-1 inserts Sensitive Information into a Log File.📖 Read
via "National Vulnerability Database".
🗓️ Flurry Finance heist nets crypto thieves $295k 🗓️
📖 Read
via "The Daily Swig".
Theft topped out at six figures after DeFi platform blocked ‘token balance multiplier’ exploit📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Flurry Finance heist nets crypto thieves $295k
Theft topped out at six figures after DeFi platform blocked ‘token balance multiplier’ exploit
‼ CVE-2022-24334 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24338 ‼
📖 Read
via "National Vulnerability Database".
JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24340 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24345 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a project was possible.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24339 ‼
📖 Read
via "National Vulnerability Database".
JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24347 ‼
📖 Read
via "National Vulnerability Database".
JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24327 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24332 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24329 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24331 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24346 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24337 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permissions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24328 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24330 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24333 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.📖 Read
via "National Vulnerability Database".