‼ CVE-2022-29329 ‼
📖 Read
via "National Vulnerability Database".
D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29322 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28910 ‼
📖 Read
via "National Vulnerability Database".
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1397 ‼
📖 Read
via "National Vulnerability Database".
API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29326 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29327 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28906 ‼
📖 Read
via "National Vulnerability Database".
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26988 ‼
📖 Read
via "National Vulnerability Database".
TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users could get remote code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28915 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29323 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29328 ‼
📖 Read
via "National Vulnerability Database".
D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29321 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29324 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.📖 Read
via "National Vulnerability Database".
⚠ Colonial Pipeline facing $1,000,000 fine for poor recovery plans ⚠
📖 Read
via "Naked Security".
How good is your cybersecurity? Are you making the same mistakes as lots of other people? Here's some real-life advice...📖 Read
via "Naked Security".
Naked Security
Colonial Pipeline facing $1,000,000 fine for poor recovery plans
How good is your cybersecurity? Are you making the same mistakes as lots of other people? Here’s some real-life advice…
🕴 Lincoln College Set to Close After Crippling Cyberattack 🕴
📖 Read
via "Dark Reading".
COVID-19 and a December 2021 cyberattack combined to put the future of Abraham Lincoln's namesake college in peril.📖 Read
via "Dark Reading".
Darkreading
Lincoln College Set to Close After Crippling Cyberattack
COVID-19 and a December 2021 cyberattack combined to put the future of Abraham Lincoln's namesake college in peril.
‼ CVE-2021-39024 ‼
📖 Read
via "National Vulnerability Database".
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213862.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22774 ‼
📖 Read
via "National Vulnerability Database".
The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, and TIBCO Managed File Transfer Internet Server contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute XML External Entity (XXE) attacks on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions 8.3.1 and below, TIBCO Managed File Transfer Command Center: versions 8.4.0 and 8.4.1, TIBCO Managed File Transfer Internet Server: versions 8.3.1 and below, and TIBCO Managed File Transfer Internet Server: versions 8.4.0 and 8.4.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1649 ‼
📖 Read
via "National Vulnerability Database".
Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/476.html).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22454 ‼
📖 Read
via "National Vulnerability Database".
IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.📖 Read
via "National Vulnerability Database".
🕴 US Pledges to Help Ukraine Keep the Internet and Lights On 🕴
📖 Read
via "Dark Reading".
US State Department outlines coordinated government effort to provide Ukraine with cybersecurity intelligence, expertise, and resources amid invasion.📖 Read
via "Dark Reading".
Darkreading
US Pledges to Help Ukraine Keep the Internet and Lights On
US State Department outlines coordinated government effort to provide Ukraine with cybersecurity intelligence, expertise, and resources amid invasion.
‼ CVE-2022-24466 ‼
📖 Read
via "National Vulnerability Database".
Windows Hyper-V Security Feature Bypass Vulnerability.📖 Read
via "National Vulnerability Database".