‼ CVE-2022-1381 ‼
📖 Read
via "National Vulnerability Database".
global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1383 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1382 ‼
📖 Read
via "National Vulnerability Database".
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system.📖 Read
via "National Vulnerability Database".
🗓️ XSS vulnerability in open source tool PrivateBin patched 🗓️
📖 Read
via "The Daily Swig".
Flaw allowed malicious JavaScript to be embedded in an SVG file📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
XSS vulnerability in open source tool PrivateBin patched
Flaw allowed malicious JavaScript to be embedded in an SVG file
❌ Cyberattackers Put the Pedal to the Medal: Podcast ❌
📖 Read
via "Threat Post".
Fortinet's Derek Manky discusses the exponential increase in the speed that attackers weaponize fresh vulnerabilities, where botnets and offensive automation fit in, and the ramifications for security teams.📖 Read
via "Threat Post".
🕴 Strength in Unity: Why It's Especially Important to Strengthen Your Supply Chain Now 🕴
📖 Read
via "Dark Reading".
The ongoing war in Ukraine means that defenses are only as good and as strong as those with whom we partner.📖 Read
via "Dark Reading".
Dark Reading
Strength in Unity: Why It's Especially Important to Strengthen Your Supply Chain Now
The ongoing war in Ukraine means that defenses are only as good and as strong as those with whom we partner.
👏1
‼ CVE-2022-28810 ‼
📖 Read
via "National Vulnerability Database".
Zoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote code execution via executable CMD.EXE input in a password field, This only occurs if a certain password sync feature is enabled that uses passwords as script arguments.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27908 ‼
📖 Read
via "National Vulnerability Database".
Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.📖 Read
via "National Vulnerability Database".
👍1
🛠 AIEngine 2.1.0 🛠
📖 Read
via "Packet Storm Security".
AIEngine is a packet inspection engine with capabilities of learning without any human intervention. It helps network/security professionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on.📖 Read
via "Packet Storm Security".
Packetstormsecurity
AIEngine 2.1.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2022-26631 ‼
📖 Read
via "National Vulnerability Database".
Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26665 ‼
📖 Read
via "National Vulnerability Database".
An Insecure Direct Object Reference issue exists in the Tyler Odyssey platform before 17.1.20. This may allow an external party to access sensitive case records.📖 Read
via "National Vulnerability Database".
🕴 Name That Toon: Helping Hands 🕴
📖 Read
via "Dark Reading".
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.📖 Read
via "Dark Reading".
Dark Reading
Name That Toon: Helping Hands
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
‼ CVE-2020-28607 ‼
📖 Read
via "National Vulnerability Database".
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_face() set_halfedge().📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28634 ‼
📖 Read
via "National Vulnerability Database".
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->next().📖 Read
via "National Vulnerability Database".
‼ CVE-2020-13567 ‼
📖 Read
via "National Vulnerability Database".
Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2020-28622 ‼
📖 Read
via "National Vulnerability Database".
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->incident_sface().📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2020-25163 ‼
📖 Read
via "National Vulnerability Database".
A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts with the infected display. This vulnerability affects PI System data and other data accessible with victim’s user permissions.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28633 ‼
📖 Read
via "National Vulnerability Database".
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->prev().📖 Read
via "National Vulnerability Database".
‼ CVE-2021-23284 ‼
📖 Read
via "National Vulnerability Database".
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28602 ‼
📖 Read
via "National Vulnerability Database".
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_vertex() Halfedge_of[].📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27529 ‼
📖 Read
via "National Vulnerability Database".
A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.📖 Read
via "National Vulnerability Database".