🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-24550 ‼

Windows Telephony Server Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".

91 views20:33

‼ CVE-2022-26815 ‼

Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829.

📖 Read

via "National Vulnerability Database".

91 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26819 ‼

Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829.

📖 Read

via "National Vulnerability Database".

88 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28113 ‼

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.

📖 Read

via "National Vulnerability Database".

93 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44486 ‼

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of execution.

📖 Read

via "National Vulnerability Database".

97 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26917 ‼

Windows Fax Compose Form Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-26916, CVE-2022-26918.

📖 Read

via "National Vulnerability Database".

100 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-24479 ‼

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".

104 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44497 ‼

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop.

📖 Read

via "National Vulnerability Database".

108 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-24481 ‼

Windows Common Log File System Driver Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24521.

📖 Read

via "National Vulnerability Database".

114 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21983 ‼

Win32 Stream Enumeration Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24534.

📖 Read

via "National Vulnerability Database".

124 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44482 ‼

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.

📖 Read

via "National Vulnerability Database".

138 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26811 ‼

Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829.

📖 Read

via "National Vulnerability Database".

162 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

🔏 Friday Five 4/15 🔏

In this week’s Friday Five, catch up on the latest attacks from Russian and North Korean hackers, a shocking report on businesses’ willingness to prioritize security, why consumers are caring less about their own security, and more!

📖 Read

via "".

Digital Guardian

Friday Five 4/15

In this week’s Friday Five, catch up on the latest attacks from Russian and North Korean hackers, a shocking report on businesses’ willingness to prioritize security, why consumers are caring less about their own security, and more!

183 views20:49

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27427 ‼

A zero-code remote code injection vulnerability via configuration.php in Chamilo LMS v1.11.13 allows attackers to upload arbitrary code in the form of a new plugin.

📖 Read

via "National Vulnerability Database".

174 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-29072 ‼

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

📖 Read

via "National Vulnerability Database".

179 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27423 ‼

Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php.

📖 Read

via "National Vulnerability Database".

173 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27426 ‼

A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.

📖 Read

via "National Vulnerability Database".

158 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27422 ‼

A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web scripts or HTML via user interaction with a crafted URL.

📖 Read

via "National Vulnerability Database".

148 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-24279 ‼

The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix of [CVE-2020-7701](https://security.snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676)

📖 Read

via "National Vulnerability Database".

167 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27425 ‼

Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php.

📖 Read

via "National Vulnerability Database".

187 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27421 ‼

Chamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to escalate privileges to Platform Admin.

📖 Read

via "National Vulnerability Database".

211 views22:20

About

Blog

Apps

Platform