‼ CVE-2022-28873 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28872 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop.📖 Read
via "National Vulnerability Database".
🗓️ Marcus Hutchins on halting the WannaCry ransomware attack – ‘Still to this day it feels like it was all a weird dream’ 🗓️
📖 Read
via "The Daily Swig".
Five years since WannaCry exploded onto the scene, ransomware still tops global threat lists ANALYSIS Five years ago today (May 12), a ransomware attack by a North Korean hacking group hit computers r📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Marcus Hutchins on halting the WannaCry ransomware attack – ‘Still to this day it feels like it was all a weird dream’
Five years since WannaCry exploded onto the scene, ransomware still tops global threat lists
⚠ Serious Security: Learning from curl’s latest bug update ⚠
📖 Read
via "Naked Security".
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.📖 Read
via "Naked Security".
Naked Security
Serious Security: Learning from curl’s latest bug update
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.
⚠ S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - lots to learn - plain English - fun with a serious side - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast]
Latest episode – lots to learn – plain English – fun with a serious side – listen now!
‼ CVE-2022-29989 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29982 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29751 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29992 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29980 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29986 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29988 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29983 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29995 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29981 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29987 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29747 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29994 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29985 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29538 ‼
📖 Read
via "National Vulnerability Database".
RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An unauthenticated user is able to access some critical resources.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29539 ‼
📖 Read
via "National Vulnerability Database".
resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software (e.g., concatenate `&|;\r\ commands) and inject arbitrary system commands with the privileges of the application user.📖 Read
via "National Vulnerability Database".