🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28262 ‼

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

📖 Read

via "National Vulnerability Database".

95 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28265 ‼

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

📖 Read

via "National Vulnerability Database".

98 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30048 ‼

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.

📖 Read

via "National Vulnerability Database".

101 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30047 ‼

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.

📖 Read

via "National Vulnerability Database".

102 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28269 ‼

Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of Annotation objects that could result in a memory leak in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

📖 Read

via "National Vulnerability Database".

100 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28240 ‼

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

📖 Read

via "National Vulnerability Database".

103 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-29845 ‼

In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the contents of a local file.

📖 Read

via "National Vulnerability Database".

108 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28245 ‼

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

📖 Read

via "National Vulnerability Database".

114 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-29846 ‼

In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number.

📖 Read

via "National Vulnerability Database".

120 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30449 ‼

Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php.

📖 Read

via "National Vulnerability Database".

126 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30062 ‼

ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php

📖 Read

via "National Vulnerability Database".

130 views20:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30057 ‼

Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.

📖 Read

via "National Vulnerability Database".

128 views20:45

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30448 ‼

Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php.

📖 Read

via "National Vulnerability Database".

141 views20:48

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28255 ‼

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

📖 Read

via "National Vulnerability Database".

161 views20:48

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30063 ‼

ftcms <=2.1 was discovered to be vulnerable to code execution attacks .

📖 Read

via "National Vulnerability Database".

172 views20:48

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30453 ‼

ShopWind <= 3.4.2 has a RCE vulnerability in Database.php

📖 Read

via "National Vulnerability Database".

200 views20:48

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30060 ‼

ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php

📖 Read

via "National Vulnerability Database".

222 views20:48

🛡 Cybersecurity & Privacy 🛡 - News

🕴 PlainID Debuts Authorization-as-a-Service Platform 🕴

Platform powered by policy-based access control (PBAC).

📖 Read

via "Dark Reading".

Darkreading

PlainID Debuts Authorization-as-a-Service Platform

Platform powered by policy-based access control (PBAC).

277 views21:22

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-30557 ‼

Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution.

📖 Read

via "National Vulnerability Database".

309 views22:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-29596 ‼

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.

📖 Read

via "National Vulnerability Database".

402 views22:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-29855 ‼

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier, and 6.0 (6.0.0.368) through 6.1 HF4 (6.1.0.165), could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.

📖 Read

via "National Vulnerability Database".

453 views22:34

About

Blog

Apps

Platform