‼ CVE-2021-42967 ‼
📖 Read
via "National Vulnerability Database".
Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29383 ‼
📖 Read
via "National Vulnerability Database".
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30489 ‼
📖 Read
via "National Vulnerability Database".
WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30373 ‼
📖 Read
via "National Vulnerability Database".
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - lots to learn - plain English - fun with a serious side - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast]
Latest episode – lots to learn – plain English – fun with a serious side – listen now!
⚠ Serious Security: Learning from curl’s latest bug update ⚠
📖 Read
via "Naked Security".
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.📖 Read
via "Naked Security".
Naked Security
Serious Security: Learning from curl’s latest bug update
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.
⚠ He cracked passwords for a living – now he’s serving 4 years in prison ⚠
📖 Read
via "Naked Security".
Crooks don't need a password for every user on your network to break in and wreak havoc. One could be enough...📖 Read
via "Naked Security".
🕴 Log4Shell Exploit Threatens Enterprise Data Lakes, AI Poisoning 🕴
📖 Read
via "Dark Reading".
A brand-new attack vector lays open enterprise data lakes, threatening grave consequences for AI use cases like telesurgery or autonomous cars.📖 Read
via "Dark Reading".
Dark Reading
Log4Shell Exploit Threatens Enterprise Data Lakes, AI Poisoning
A brand-new attack vector lays open enterprise data lakes, threatening grave consequences for AI use cases like telesurgery or autonomous cars.
🗓️ Black Hat Asia: ‘If democracy is to survive, technology will have to be tamed’ 🗓️
📖 Read
via "The Daily Swig".
Indian tech policy expert Samir Saran says it’s not too late to ‘course-correct’ after a ‘challenging decade’ for liberal democracies📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Black Hat Asia: ‘If democracy is to survive, technology will have to be tamed’
Indian tech policy expert Samir Saran says it’s not too late to ‘course-correct’ after a ‘challenging decade’ for liberal democracies
‼ CVE-2022-28827 ‼
📖 Read
via "National Vulnerability Database".
Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29790 ‼
📖 Read
via "National Vulnerability Database".
The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28826 ‼
📖 Read
via "National Vulnerability Database".
Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29794 ‼
📖 Read
via "National Vulnerability Database".
The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30386 ‼
📖 Read
via "National Vulnerability Database".
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28822 ‼
📖 Read
via "National Vulnerability Database".
Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46785 ‼
📖 Read
via "National Vulnerability Database".
The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30417 ‼
📖 Read
via "National Vulnerability Database".
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manage_user&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22261 ‼
📖 Read
via "National Vulnerability Database".
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30381 ‼
📖 Read
via "National Vulnerability Database".
Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30384 ‼
📖 Read
via "National Vulnerability Database".
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28821 ‼
📖 Read
via "National Vulnerability Database".
Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.📖 Read
via "National Vulnerability Database".