‼ CVE-2022-0551 ‼
📖 Read
via "National Vulnerability Database".
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43659 ‼
📖 Read
via "National Vulnerability Database".
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0955 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1058 ‼
📖 Read
via "National Vulnerability Database".
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-39491 ‼
📖 Read
via "National Vulnerability Database".
A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan Engine deletion confirmation modal box . .📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0550 ‼
📖 Read
via "National Vulnerability Database".
Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.📖 Read
via "National Vulnerability Database".
🕴 APIs & the Software Supply Chain — Evolving Security for Today's Digital Ecosystem 🕴
📖 Read
via "Dark Reading".
Securing APIs requires both a "shift left" methodology and "shield right" action.📖 Read
via "Dark Reading".
Dark Reading
APIs & the Software Supply Chain — Evolving Security for Today's Digital Ecosystem
Securing APIs requires both a "shift left" methodology and "shield right" action.
❌ HubSpot Data Breach Ripples Through Crytocurrency Industry ❌
📖 Read
via "Threat Post".
~30 crypto companies were affected, including BlockFi, Swan Bitcoin and NYDIG, providing an uncomfortable reminder about how much data CRM systems snarf up.📖 Read
via "Threat Post".
Threat Post
HubSpot Data Breach Ripples Through Crytocurrency Industry
~30 crypto companies were affected, including BlockFi, Swan Bitcoin and NYDIG, providing an uncomfortable reminder about how much data CRM systems snarf up.
🕴 For MSPs, Next-Gen Email Security Is a Must 🕴
📖 Read
via "Dark Reading".
Stay one step ahead of the constantly evolving cyber threats with the right MSP email security solution. Discover how to evaluate and select the best service and solutions for your clients.📖 Read
via "Dark Reading".
Dark Reading
For MSPs, Next-Gen Email Security Is a Must
Stay one step ahead of the constantly evolving cyberthreats with the right MSP email security solution. Discover how to evaluate and select the best service and solutions for your clients.
‼ CVE-2022-21820 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26629 ‼
📖 Read
via "National Vulnerability Database".
An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0153 ‼
📖 Read
via "National Vulnerability Database".
SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25568 ‼
📖 Read
via "National Vulnerability Database".
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.📖 Read
via "National Vulnerability Database".
🕴 How Casinos Can Prevent Loyalty Incentive and Account Takeover Fraud 🕴
📖 Read
via "Dark Reading".
As casinos go digital, their loyalty programs and authentic accounts are at risk.📖 Read
via "Dark Reading".
Dark Reading
How Casinos Can Prevent Loyalty Incentive and Account Takeover Fraud
As casinos go digital, their loyalty programs and authentic accounts are at risk.
❌ Just-Released Dark Souls Game, Elden Ring, Includes Killer Bug ❌
📖 Read
via "Threat Post".
A patch fixes exploit hidden in Elden Ring that traps PC players in a ‘death loop.’📖 Read
via "Threat Post".
Threat Post
Just-Released Dark Souls Game, Elden Ring, Includes Killer Bug
A patch fixes exploit hidden in Elden Ring that traps PC players in a ‘death loop.’
🔏 Proposed Commission Would Seek to Modernize HIPAA 🔏
📖 Read
via "".
As part of new legislation, a new commission would assess the current state of health data privacy and lay the groundwork for modernizing HIPAA.📖 Read
via "".
‼ CVE-2021-43085 ‼
📖 Read
via "National Vulnerability Database".
An Insecure Permissions vulnerability exists in the OpenSSL Project 3.0 due to an error in the implementation of the CMAC_Final() function.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43666 ‼
📖 Read
via "National Vulnerability Database".
A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22374 ‼
📖 Read
via "National Vulnerability Database".
The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43084 ‼
📖 Read
via "National Vulnerability Database".
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.📖 Read
via "National Vulnerability Database".
❌ Microsoft Azure Developers Awash in PII-Stealing npm Packages ❌
📖 Read
via "Threat Post".
A large-scale, automated typosquatting attack saw 200+ malicious packages flood the npm code repository, targeting popular Azure scopes.📖 Read
via "Threat Post".
Threat Post
Microsoft Azure Developers Awash in PII-Stealing npm Packages
A large-scale, automated typosquatting attack saw 200+ malicious packages flood the npm code repository, targeting popular Azure scopes.