‼ CVE-2022-25266 ‼
📖 Read
via "National Vulnerability Database".
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).📖 Read
via "National Vulnerability Database".
‼ CVE-2020-20093 ‼
📖 Read
via "National Vulnerability Database".
The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27192 ‼
📖 Read
via "National Vulnerability Database".
The Reporting module in Aseco Lietuva document management system DVS Avilys before 2022-03-10 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0315 ‼
📖 Read
via "National Vulnerability Database".
Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.📖 Read
via "National Vulnerability Database".
🗓️ Flash loan attack on One Ring protocol nets crypto-thief $1.4 million 🗓️
📖 Read
via "The Daily Swig".
Price manipulation of LP tokens ejected OShare tokens from protocol📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Flash loan attack on One Ring protocol nets crypto-thief $1.4 million
Price manipulation of LP tokens ejected OShare tokens from protocol
‼ CVE-2022-0145 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1061 ‼
📖 Read
via "National Vulnerability Database".
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.📖 Read
via "National Vulnerability Database".
❌ Top 3 Attack Trends in API Security – Podcast ❌
📖 Read
via "Threat Post".
Bots & automated attacks have exploded, with attackers and developers alike in love with APIs, according to a new Cequence Security report. Hacker-in-residence Jason Kent explains the latest.📖 Read
via "Threat Post".
Threat Post
Top 3 Attack Trends in API Security – Podcast
Bots & automated attacks have exploded, with attackers and developers alike in love with APIs, according to a new Cequence Security report. Hacker-in-residence Jason Kent explains the latest.
❌ Microsoft Help Files Disguise Vidar Malware ❌
📖 Read
via "Threat Post".
Attackers are hiding interesting malware in a boring place, hoping victims won’t bother to look.📖 Read
via "Threat Post".
Threat Post
Microsoft Help Files Disguise Vidar Malware
Attackers are hiding interesting malware in a boring place, hoping victims won’t bother to look.
❌ Tax-Season Scammers Spoof Fintechs, Including Stash, Public ❌
📖 Read
via "Threat Post".
Threat actors are impersonating such wildly popular personal-finance apps (which are used more than social media or streaming services) to try to fool people into giving up their credentials.📖 Read
via "Threat Post".
Threat Post
Tax-Season Scammers Spoof Fintechs, Including Stash, Public
Threat actors are impersonating such wildly popular personal-finance apps (which are used more than social media or streaming services) to try to fool people into giving up their credentials.
🗓️ FBI Most Wanted Russian national accused of running dark web marketplace 🗓️
📖 Read
via "The Daily Swig".
The 23-year-old has been indicted for operating a successful carding ring📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
FBI Most Wanted Russian national accused of running dark web marketplace
The 23-year-old has been indicted for operating a successful carding ring
⚠ S3 Ep75: Okta hack, CryptoRom, OpenSSL, and CafePress [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep75: Okta hack, CryptoRom, OpenSSL, and CafePress [Podcast]
Latest episode – listen now!
🕴 What the Conti Ransomware Group Data Leak Tells Us 🕴
📖 Read
via "Dark Reading".
Knowing the inner workings of Conti will not only help ransomware negotiators but also help organizations to better handle a ransomware attack when it happens.📖 Read
via "Dark Reading".
Dark Reading
What the Conti Ransomware Group Data Leak Tells Us
Knowing the inner workings of Conti will not only help ransomware negotiators but also help organizations to better handle a ransomware attack when it happens.
‼ CVE-2021-43700 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=api&tag=8.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1052 ‼
📖 Read
via "National Vulnerability Database".
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.📖 Read
via "National Vulnerability Database".
❌ Chinese APT Combines Fresh Hodur RAT with Complex Anti-Detection ❌
📖 Read
via "Threat Post".
Mustang Panda's already sophisticated cyberespionage campaign has matured even further with the introduction of a brand-new PlugX RAT variant.📖 Read
via "Threat Post".
Threat Post
Chinese APT Combines Fresh Hodur RAT with Complex Anti-Detection
Mustang Panda’s already sophisticated cyberespionage campaign has matured even further with the introduction of a brand-new PlugX RAT variant.
🛠 Wireshark Analyzer 3.6.3 🛠
📖 Read
via "Packet Storm Security".
Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Wireshark Analyzer 3.6.3 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🗓️ Microweber developers resolve XSS vulnerability in CMS software 🗓️
📖 Read
via "The Daily Swig".
Content filtering shortcomings led to web security flaw📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Microweber developers resolve XSS vulnerability in CMS software
Content filtering shortcomings led to web security flaw
‼ CVE-2022-0551 ‼
📖 Read
via "National Vulnerability Database".
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43659 ‼
📖 Read
via "National Vulnerability Database".
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0955 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.📖 Read
via "National Vulnerability Database".