❌ Cyberattacks Against Israeli Government Sites: ‘Largest in the Country’s History’ ❌
📖 Read
via "Threat Post".
DDoS attacks against Israel telecom companies took down government sites, sparking a temporary state of emergency.📖 Read
via "Threat Post".
Threat Post
Cyberattacks Against Israeli Government Sites: ‘Largest in the Country’s History’
DDoS attacks against Israel telecom companies took down government sites, sparking a temporary state of emergency.
‼ CVE-2022-25488 ‼
📖 Read
via "National Vulnerability Database".
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25497 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45848 ‼
📖 Read
via "National Vulnerability Database".
Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25494 ‼
📖 Read
via "National Vulnerability Database".
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff_login.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25485 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25486 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25492 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25491 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25489 ‼
📖 Read
via "National Vulnerability Database".
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25498 ‼
📖 Read
via "National Vulnerability Database".
CuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the saveConfigData function in /classes/ajax/Functions.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25490 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25495 ‼
📖 Read
via "National Vulnerability Database".
The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25493 ‼
📖 Read
via "National Vulnerability Database".
HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25487 ‼
📖 Read
via "National Vulnerability Database".
Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.📖 Read
via "National Vulnerability Database".
🕴 Mobile App Developers Leave Behind 2,100 Open Databases 🕴
📖 Read
via "Dark Reading".
A simple request to the VirusTotal scanning service reveals thousands of mobile-application databases left open to the public by developers in a three-month period.📖 Read
via "Dark Reading".
Dark Reading
Mobile App Developers Leave Behind 2,100 Open Databases
A simple request to the VirusTotal scanning service reveals thousands of mobile-application databases left open to the public by developers in a three-month period.
🕴 NAS Vendor Says Several of Its Products Likely Contain Linux 'Dirty Pipe' Flaw 🕴
📖 Read
via "Dark Reading".
QNAP's disclosure this week is the latest reminder of the potentially wide impact of privilege escalation flaw in the Linux kernel.📖 Read
via "Dark Reading".
Dark Reading
NAS Vendor Says Several of Its Products Likely Contain Linux 'Dirty Pipe' Flaw
QNAP's disclosure this week is the latest reminder of the potentially wide impact of privilege escalation flaw in the Linux kernel.
‼ CVE-2021-29134 ‼
📖 Read
via "National Vulnerability Database".
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23989 ‼
📖 Read
via "National Vulnerability Database".
In Stormshield Network Security (SNS) 3.7.6 through 3.7.24, 3.11.1 through 3.11.12, 4.2.1 through 4.2.9, and 4.3.0 through 4.3.4, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, making the firewall unreachable. An attacker could exploit this via forged and properly timed traffic to cause a denial of service.📖 Read
via "National Vulnerability Database".
🕴 Private Equity Firm Snaps Up RSA Conference 🕴
📖 Read
via "Dark Reading".
Crosspoint Capital Partners, along with Clearlake Capital Group and Symphony Technology Group, are setting up RSA Conference as a separate company from RSA Security.📖 Read
via "Dark Reading".
Dark Reading
Private Equity Firm Snaps Up RSA Conference
Crosspoint Capital Partners, along with Clearlake Capital Group and Symphony Technology Group, are setting up RSA Conference as a separate company from RSA Security.
‼ CVE-2022-27004 ‼
📖 Read
via "National Vulnerability Database".
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.📖 Read
via "National Vulnerability Database".