🕴 Incognia Introduces New Location Identity Fraud Detection Tools 🕴
📖 Read
via "Dark Reading".
Modules include Location Spoofing Detection, Global Mobile Address Validation, and Trusted Device Intelligence.📖 Read
via "Dark Reading".
Dark Reading
Incognia Introduces New Location Identity Fraud Detection Tools
Modules include Location Spoofing Detection, Global Mobile Address Validation, and Trusted Device Intelligence.
🔏 Utah Set to Pass U.S.'s Next Data Privacy Bill 🔏
📖 Read
via "".
Utah looks like it will become the fourth U.S. state, after California, Virginia, and Colorado, to pass comprehensive consumer privacy legislation.📖 Read
via "".
Digital Guardian
Utah Set to Pass U.S.'s Next Data Privacy Bill
Utah looks like it will become the fourth U.S. state, after California, Virginia, and Colorado, to pass comprehensive consumer privacy legislation.
❌ Cyberattacks Against Israeli Government Sites: ‘Largest in the Country’s History’ ❌
📖 Read
via "Threat Post".
DDoS attacks against Israel telecom companies took down government sites, sparking a temporary state of emergency.📖 Read
via "Threat Post".
Threat Post
Cyberattacks Against Israeli Government Sites: ‘Largest in the Country’s History’
DDoS attacks against Israel telecom companies took down government sites, sparking a temporary state of emergency.
‼ CVE-2022-25488 ‼
📖 Read
via "National Vulnerability Database".
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25497 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45848 ‼
📖 Read
via "National Vulnerability Database".
Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25494 ‼
📖 Read
via "National Vulnerability Database".
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff_login.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25485 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25486 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25492 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25491 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25489 ‼
📖 Read
via "National Vulnerability Database".
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25498 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the saveConfigData function in /classes/ajax/Functions.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25490 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25495 ‼
📖 Read
via "National Vulnerability Database".
The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25493 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25487 ‼
📖 Read
via "National Vulnerability Database".
Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.📖 Read
via "National Vulnerability Database".
🕴 Mobile App Developers Leave Behind 2,100 Open Databases 🕴
📖 Read
via "Dark Reading".
A simple request to the VirusTotal scanning service reveals thousands of mobile-application databases left open to the public by developers in a three-month period.📖 Read
via "Dark Reading".
Dark Reading
Mobile App Developers Leave Behind 2,100 Open Databases
A simple request to the VirusTotal scanning service reveals thousands of mobile-application databases left open to the public by developers in a three-month period.
🕴 NAS Vendor Says Several of Its Products Likely Contain Linux 'Dirty Pipe' Flaw 🕴
📖 Read
via "Dark Reading".
QNAP's disclosure this week is the latest reminder of the potentially wide impact of privilege escalation flaw in the Linux kernel.📖 Read
via "Dark Reading".
Dark Reading
NAS Vendor Says Several of Its Products Likely Contain Linux 'Dirty Pipe' Flaw
QNAP's disclosure this week is the latest reminder of the potentially wide impact of privilege escalation flaw in the Linux kernel.
‼ CVE-2021-29134 ‼
📖 Read
via "National Vulnerability Database".
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23989 ‼
📖 Read
via "National Vulnerability Database".
In Stormshield Network Security (SNS) 3.7.6 through 3.7.24, 3.11.1 through 3.11.12, 4.2.1 through 4.2.9, and 4.3.0 through 4.3.4, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, making the firewall unreachable. An attacker could exploit this via forged and properly timed traffic to cause a denial of service.📖 Read
via "National Vulnerability Database".