‼ CVE-2022-1555 ‼
📖 Read
via "National Vulnerability Database".
DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1502 ‼
📖 Read
via "National Vulnerability Database".
Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions.📖 Read
via "National Vulnerability Database".
❌ Unpatched DNS Bug Puts Millions of Routers, IoT Devices at Risk ❌
📖 Read
via "Threat Post".
A flaw in all versions of the popular C standard libraries uClibe and uClibe-ng can allow for DNS poisoning attacks against target devices.📖 Read
via "Threat Post".
Threat Post
Unpatched DNS Bug Puts Millions of Routers, IoT Devices at Risk
A flaw in all versions of the popular C standard libraries uClibc and uClibe-ng can allow for DNS poisoning attacks against target devices.
🗓️ TLStorm 2.0: Millions of Aruba and Avaya network switches affected by RCE flaws 🗓️
📖 Read
via "The Daily Swig".
Patches issued for vulnerabilities arising from misuse of NanoSSL TLS library📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
TLStorm 2.0: Millions of Aruba and Avaya network switches affected by RCE flaws
Patches issued for vulnerabilities arising from misuse of NanoSSL TLS library
🕴 Aryaka, Carnegie Mellon’s CyLab to Research New Threat Mitigation Techniques 🕴
📖 Read
via "Dark Reading".
The security research partnership will focus on developing new techniques and releasing them as open source.📖 Read
via "Dark Reading".
Darkreading
Aryaka, Carnegie Mellon’s CyLab to Research New Threat Mitigation Techniques
The security research partnership will focus on developing new techniques and releasing them as open source.
‼ CVE-2022-1571 ‼
📖 Read
via "National Vulnerability Database".
Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. This vulnerability can be arbitrarily executed javascript code to steal user'cookie, perform HTTP request, get content of `same origin` page, etc ...📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42192 ‼
📖 Read
via "National Vulnerability Database".
Konga v0.14.9 is affected by an incorrect access control vulnerability where a specially crafted request can lead to privilege escalation.📖 Read
via "National Vulnerability Database".
🗓️ State Bar of Georgia reels from cyber-attack 🗓️
📖 Read
via "The Daily Swig".
Bar suspends website after mystery assault📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
State Bar of Georgia reels from cyber-attack
Bar suspends website after mystery assault
❌ Attackers Use Event Logs to Hide Fileless Malware ❌
📖 Read
via "Threat Post".
A sophisticated campaign utilizes a novel anti-detection method.📖 Read
via "Threat Post".
Threat Post
Attackers Use Event Logs to Hide Fileless Malware
A sophisticated campaign utilizes a novel anti-detection method.
🛠 Clam AntiVirus Toolkit 0.105.0 🛠
📖 Read
via "Packet Storm Security".
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Clam AntiVirus Toolkit 0.105.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 SAC Health System Impacted By Security Incident 🕴
📖 Read
via "Dark Reading".
Six boxes of paper documents were removed from the facility without authorization in early March.📖 Read
via "Dark Reading".
Darkreading
SAC Health System Impacted By Security Incident
Six boxes of paper documents were removed from the facility without authorization in early March.
🕴 AutoRABIT Secures $26M in Series B Investment from Full In Partners to Expand DevSecOps Platform 🕴
📖 Read
via "Dark Reading".
AutoRABIT intends to direct the funding toward growth initiatives and product development.📖 Read
via "Dark Reading".
Darkreading
AutoRABIT Secures $26M in Series B Investment from Full In Partners to Expand DevSecOps Platform
AutoRABIT intends to direct the funding toward growth initiatives and product development.
🕴 What Stars Wars Teaches Us About Threats 🕴
📖 Read
via "Dark Reading".
The venerable film franchise shows us how to take threats in STRIDE.📖 Read
via "Dark Reading".
Dark Reading
What Star Wars Teaches Us About Threats
The venerable film franchise shows us how to take threats in STRIDE.
🕴 Uptycs Announces New Cloud Identity and Entitlement Management (CIEM) Capabilities 🕴
📖 Read
via "Dark Reading".
Also adds support for Google Cloud Platform (GCP) and Microsoft Azure, and PCI compliance coverage.📖 Read
via "Dark Reading".
Darkreading
Uptycs Announces New Cloud Identity and Entitlement Management (CIEM) Capabilities
Also adds support for Google Cloud Platform (GCP) and Microsoft Azure, and PCI compliance coverage.
‼ CVE-2021-42185 ‼
📖 Read
via "National Vulnerability Database".
wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28111 ‼
📖 Read
via "National Vulnerability Database".
MyBatis PageHelper v1.x.x-v5.x.x was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28096 ‼
📖 Read
via "National Vulnerability Database".
Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.📖 Read
via "National Vulnerability Database".
🗓️ Zero-day bug in uClibc library could leave IoT devices vulnerable to DNS poisoning attacks 🗓️
📖 Read
via "The Daily Swig".
Unpatched flaw caused by the predictability of transaction IDs📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Zero-day bug in uClibc library could leave IoT devices vulnerable to DNS poisoning attacks
Unpatched flaw caused by the predictability of transaction IDs
⚠ Firefox hits 100*, fixes bugs… but no new zero-days this month ⚠
📖 Read
via "Naked Security".
Despite concerns that some websites might break when Chromium and then Firefox reached version 100, the web still seems to be intact.📖 Read
via "Naked Security".
Naked Security
Firefox hits 100*, fixes bugs… but no new zero-days this month
Despite concerns that some websites might break when Chromium and then Firefox reached version 100, the web still seems to be intact.
🕴 AI for Cybersecurity Shimmers With Promise, But Challenges Abound 🕴
📖 Read
via "Dark Reading".
Companies see AI-powered cybersecurity tools and systems as the future, but at present nearly 90% of them say they face significant hurdles in making use of them.📖 Read
via "Dark Reading".
Darkreading
AI for Cybersecurity Shimmers With Promise, but Challenges Abound
Companies see AI-powered cybersecurity tools and systems as the future, but at present nearly 90% of them say they face significant hurdles in making use of them.
⚠ Android monthly updates are out – critical bugs found in critical places! ⚠
📖 Read
via "Naked Security".
Android May 2022 updates are out - with some critical fixes in some critical places. Learn more...📖 Read
via "Naked Security".
Naked Security
Android monthly updates are out – critical bugs found in critical places!
Android May 2022 updates are out – with some critical fixes in some critical places. Learn more…