‼ CVE-2022-22521 ‼
📖 Read
via "National Vulnerability Database".
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed by users with administrative privileges. An attacker could thereby obtain higher permissions. The attacker must already have access to the corresponding local system to be able to exchange the files.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22312 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38874 ‼
📖 Read
via "National Vulnerability Database".
IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. IBM X-Force ID: 208397.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38878 ‼
📖 Read
via "National Vulnerability Database".
IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2021-38939 ‼
📖 Read
via "National Vulnerability Database".
IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34590 ‼
📖 Read
via "National Vulnerability Database".
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38919 ‼
📖 Read
via "National Vulnerability Database".
IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27336 ‼
📖 Read
via "National Vulnerability Database".
Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22277 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34591 ‼
📖 Read
via "National Vulnerability Database".
In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34592 ‼
📖 Read
via "National Vulnerability Database".
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34588 ‼
📖 Read
via "National Vulnerability Database".
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22278 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34587 ‼
📖 Read
via "National Vulnerability Database".
In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34589 ‼
📖 Read
via "National Vulnerability Database".
In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25266 ‼
📖 Read
via "National Vulnerability Database".
An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-29776 ‼
📖 Read
via "National Vulnerability Database".
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user. IBM X-Force ID: 203030.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1507 ‼
📖 Read
via "National Vulnerability Database".
chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file.📖 Read
via "National Vulnerability Database".
🛠 nfstream 6.5.1 🛠
📖 Read
via "Packet Storm Security".
nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments.📖 Read
via "Packet Storm Security".
Packetstormsecurity
nfstream 6.5.1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
👍1
🕴 Coca-Cola Investigates Data-Theft Claims After Ransomware Attack 🕴
📖 Read
via "Dark Reading".
The Stormous ransomware group is offering purportedly stolen Coca-Cola data for sale on its leak site, but the soda giant hasn't confirmed that the heist happened.📖 Read
via "Dark Reading".
Dark Reading
Coca-Cola Investigates Data-Theft Claims After Ransomware Attack
The Stormous ransomware group is offering purportedly stolen Coca-Cola data for sale on its leak site, but the soda giant hasn't confirmed that the heist happened.
❌ Emotet is Back From ‘Spring Break’ With New Nasty Tricks ❌
📖 Read
via "Threat Post".
The Botnet appears to use a new delivery method for compromising Windows systems after Microsoft disables VBA macros by default.📖 Read
via "Threat Post".
Threat Post
Emotet is Back From ‘Spring Break’ With New Nasty Tricks
The Botnet appears to use a new delivery method for compromising Windows systems after Microsoft disables VBA macros by default.