‼ CVE-2022-1192 ‼
📖 Read
via "National Vulnerability Database".
The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42586 ‼
📖 Read
via "National Vulnerability Database".
A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29599 ‼
📖 Read
via "National Vulnerability Database".
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1825 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Reflected in GitHub repository collectiveaccess/providence prior to 1.8.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42585 ‼
📖 Read
via "National Vulnerability Database".
A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28874 ‼
📖 Read
via "National Vulnerability Database".
Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.📖 Read
via "National Vulnerability Database".
❌ Zero Trust for Data Helps Enterprises Detect, Respond and Recover from Breaches ❌
📖 Read
via "Threat Post".
Mohit Tiwari, CEO of Symmetry Systems, explores Zero Trust, data objects and the NIST framework for cloud and on-prem environments.📖 Read
via "Threat Post".
Threat Post
Zero Trust for Data Helps Enterprises Detect, Respond and Recover from Breaches
Mohit Tiwari, CEO of Symmetry Systems, explores Zero Trust, data objects and the NIST framework for cloud and on-prem environments.
⚠ Clearview AI face-matching service fined a lot less than expected ⚠
📖 Read
via "Naked Security".
The fine has finally gone through... but it's less than 45% of what was originally proposed.📖 Read
via "Naked Security".
Naked Security
Clearview AI face-matching service fined a lot less than expected
The fine has finally gone through… but it’s less than 45% of what was originally proposed.
🗓️ Blockchain bridge Wormhole pays record $10m bug bounty reward 🗓️
📖 Read
via "The Daily Swig".
Critical security flaw patched on the same day it was submitted📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Blockchain bridge Wormhole pays record $10m bug bounty reward
Critical security flaw patched on the same day it was submitted
🕴 After the Okta Breach, Diversify Your Sources of Truth 🕴
📖 Read
via "Dark Reading".
What subsequent protections do you have in place when your first line of defense goes down?📖 Read
via "Dark Reading".
Dark Reading
After the Okta Breach, Diversify Your Sources of Truth
What subsequent protections do you have in place when your first line of defense goes down?
🗓️ Yik Yak fixes information disclosure bug that leaked users’ GPS location 🗓️
📖 Read
via "The Daily Swig".
Hairy MitM exploit independently discovered by two security researchers📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Yik Yak fixes information disclosure bug that leaked users’ GPS location
Hairy MitM exploit independently discovered by two security researchers
‼ CVE-2022-1817 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input </td><img src="" onerror="alert(1)"><td>1 leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1816 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1810 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in GitHub repository publify/publify prior to 9.2.9.📖 Read
via "National Vulnerability Database".
🕴 Valeo Networks Acquires Next I.T. 🕴
📖 Read
via "Dark Reading".
Next I.T. is the sixth and largest acquisition to date for Valeo Networks.📖 Read
via "Dark Reading".
Dark Reading
Valeo Networks Acquires Next I.T.
Next I.T. is the sixth and largest acquisition to date for Valeo Networks.
🕴 Kingston Digital Releases Touch-Screen Hardware-Encrypted External SSD for Data Protection 🕴
📖 Read
via "Dark Reading".
IronKey Vault Privacy 80 External SSD safeguards against brute-force attacks and BadUSB with digitally-signed firmware.📖 Read
via "Dark Reading".
Dark Reading
Kingston Digital Releases Touch-Screen Hardware-Encrypted External SSD for Data Protection
IronKey Vault Privacy 80 External SSD safeguards against brute-force attacks and BadUSB with digitally-signed firmware.
🗓️ Chicago Public Schools data breach blamed on ransomware attack on supplier 🗓️
📖 Read
via "The Daily Swig".
Cybercrooks compromised server containing student course information and assessment data📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Chicago Public Schools data breach blamed on third-party ransomware attack
Cybercrooks compromised server containing student course information and assessment data
‼ CVE-2022-28997 ‼
📖 Read
via "National Vulnerability Database".
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0900 ‼
📖 Read
via "National Vulnerability Database".
A Stored Cross-Site Scripting (XSS) vulnerability in DivvyDrive's "aciklama" parameter could allow anyone to gain users' session informations.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28998 ‼
📖 Read
via "National Vulnerability Database".
Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via crafted code.📖 Read
via "National Vulnerability Database".
🗓️ Pwn2Own Vancouver: 15th annual hacking event pays out $1.2m for high-impact security bugs 🗓️
📖 Read
via "The Daily Swig".
Tesla, Microsoft, and others targeted in hacking competition that saw Star Labs crowned ‘Masters of Pwn’📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Pwn2Own Vancouver: 15th annual hacking event pays out $1.2m for high-impact security bugs
Tesla, Microsoft, and others targeted in hacking competition that saw Star Labs crowned ‘Masters of Pwn’