🕴 New Regulations in India Require Orgs to Report Cyber Incidents Within 6 Hours 🕴
📖 Read
via "Dark Reading".
CERT-In updates cybersecurity rules to include mandatory reporting, record-keeping, and more.📖 Read
via "Dark Reading".
Darkreading
New Regulations in India Require Orgs to Report Cyber Incidents Within 6 Hours
CERT-In updates cybersecurity rules to include mandatory reporting, record-keeping, and more.
‼ CVE-2021-3750 ‼
📖 Read
via "National Vulnerability Database".
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions (such as reset) while the device is still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects QEMU versions before 7.0.0.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-1375 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1366 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1369 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1371 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1377 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1374 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1376 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1515 ‼
📖 Read
via "National Vulnerability Database".
A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26326 ‼
📖 Read
via "National Vulnerability Database".
Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3643 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1370 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1378 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1372 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1475 ‼
📖 Read
via "National Vulnerability Database".
An integer overflow vulnerability was found in FFmpeg 5.0.1 and in previous versions in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1367 ‼
📖 Read
via "National Vulnerability Database".
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28613 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the HCI Modbus TCP COMPONENT of Hitachi Energy RTU500 series CMU Firmware that is caused by the validation error in the length information carried in MBAP header allows an ATTACKER to reboot the device by sending a special crafted message. This issue affects: Hitachi Energy RTU500 series CMU Firmware 12.0.*; 12.2.*; 12.4.*; 12.6.*; 12.7.*; 13.2.*.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26325 ‼
📖 Read
via "National Vulnerability Database".
Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2📖 Read
via "National Vulnerability Database".
🔏 Connecticut Set to Pass Nation's Next Data Privacy Law 🔏
📖 Read
via "".
The bill, which is similar to the privacy laws recently passed in Colorado, Virginia and Utah, would give Connecticut consumers more control over the personal data collected about them by companies online.📖 Read
via "".
Digital Guardian
Connecticut Set to Pass Nation's Next Data Privacy Law
The bill, which is similar to the privacy laws recently passed in Colorado, Virginia and Utah, would give Connecticut consumers more control over the personal data collected about them by companies online.
🕴 Google Offers $1.5M Bug Bounty for Android 13 Beta 🕴
📖 Read
via "Dark Reading".
The security vulnerability payout set bug hunters rejoicing, but claiming the reward is much, much easier said than done.📖 Read
via "Dark Reading".
Darkreading
Google Offers $1.5M Bug Bounty for Android 13 Beta
The security vulnerability payout set bug hunters rejoicing, but claiming the reward is much, much easier said than done.