‼ CVE-2022-28111 ‼
📖 Read
via "National Vulnerability Database".
MyBatis PageHelper v1.x.x-v5.x.x was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28096 ‼
📖 Read
via "National Vulnerability Database".
Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.📖 Read
via "National Vulnerability Database".
🗓️ Zero-day bug in uClibc library could leave IoT devices vulnerable to DNS poisoning attacks 🗓️
📖 Read
via "The Daily Swig".
Unpatched flaw caused by the predictability of transaction IDs📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Zero-day bug in uClibc library could leave IoT devices vulnerable to DNS poisoning attacks
Unpatched flaw caused by the predictability of transaction IDs
⚠ Firefox hits 100*, fixes bugs… but no new zero-days this month ⚠
📖 Read
via "Naked Security".
Despite concerns that some websites might break when Chromium and then Firefox reached version 100, the web still seems to be intact.📖 Read
via "Naked Security".
Naked Security
Firefox hits 100*, fixes bugs… but no new zero-days this month
Despite concerns that some websites might break when Chromium and then Firefox reached version 100, the web still seems to be intact.
🕴 AI for Cybersecurity Shimmers With Promise, But Challenges Abound 🕴
📖 Read
via "Dark Reading".
Companies see AI-powered cybersecurity tools and systems as the future, but at present nearly 90% of them say they face significant hurdles in making use of them.📖 Read
via "Dark Reading".
Darkreading
AI for Cybersecurity Shimmers With Promise, but Challenges Abound
Companies see AI-powered cybersecurity tools and systems as the future, but at present nearly 90% of them say they face significant hurdles in making use of them.
⚠ Android monthly updates are out – critical bugs found in critical places! ⚠
📖 Read
via "Naked Security".
Android May 2022 updates are out - with some critical fixes in some critical places. Learn more...📖 Read
via "Naked Security".
Naked Security
Android monthly updates are out – critical bugs found in critical places!
Android May 2022 updates are out – with some critical fixes in some critical places. Learn more…
‼ CVE-2022-29347 ‼
📖 Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in Web@archiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28552 ‼
📖 Read
via "National Vulnerability Database".
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28081 ‼
📖 Read
via "National Vulnerability Database".
A reflected cross-site scripting (XSS) vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27903 ‼
📖 Read
via "National Vulnerability Database".
An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25784 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28512 ‼
📖 Read
via "National Vulnerability Database".
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28076 ‼
📖 Read
via "National Vulnerability Database".
Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28487 ‼
📖 Read
via "National Vulnerability Database".
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25787 ‼
📖 Read
via "National Vulnerability Database".
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28066 ‼
📖 Read
via "National Vulnerability Database".
Libarchive v3.6.0 was discovered to contain a read memory access vulnerability via the function lzma_decode.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25785 ‼
📖 Read
via "National Vulnerability Database".
Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25781 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28067 ‼
📖 Read
via "National Vulnerability Database".
An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service (DoS) in the Sandbox via a crafted executable.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28488 ‼
📖 Read
via "National Vulnerability Database".
The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25783 ‼
📖 Read
via "National Vulnerability Database".
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.📖 Read
via "National Vulnerability Database".