‼ CVE-2022-1816 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1810 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in GitHub repository publify/publify prior to 9.2.9.📖 Read
via "National Vulnerability Database".
🕴 Valeo Networks Acquires Next I.T. 🕴
📖 Read
via "Dark Reading".
Next I.T. is the sixth and largest acquisition to date for Valeo Networks.📖 Read
via "Dark Reading".
Dark Reading
Valeo Networks Acquires Next I.T.
Next I.T. is the sixth and largest acquisition to date for Valeo Networks.
🕴 Kingston Digital Releases Touch-Screen Hardware-Encrypted External SSD for Data Protection 🕴
📖 Read
via "Dark Reading".
IronKey Vault Privacy 80 External SSD safeguards against brute-force attacks and BadUSB with digitally-signed firmware.📖 Read
via "Dark Reading".
Dark Reading
Kingston Digital Releases Touch-Screen Hardware-Encrypted External SSD for Data Protection
IronKey Vault Privacy 80 External SSD safeguards against brute-force attacks and BadUSB with digitally-signed firmware.
🗓️ Chicago Public Schools data breach blamed on ransomware attack on supplier 🗓️
📖 Read
via "The Daily Swig".
Cybercrooks compromised server containing student course information and assessment data📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Chicago Public Schools data breach blamed on third-party ransomware attack
Cybercrooks compromised server containing student course information and assessment data
‼ CVE-2022-28997 ‼
📖 Read
via "National Vulnerability Database".
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0900 ‼
📖 Read
via "National Vulnerability Database".
A Stored Cross-Site Scripting (XSS) vulnerability in DivvyDrive's "aciklama" parameter could allow anyone to gain users' session informations.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28998 ‼
📖 Read
via "National Vulnerability Database".
Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via crafted code.📖 Read
via "National Vulnerability Database".
🗓️ Pwn2Own Vancouver: 15th annual hacking event pays out $1.2m for high-impact security bugs 🗓️
📖 Read
via "The Daily Swig".
Tesla, Microsoft, and others targeted in hacking competition that saw Star Labs crowned ‘Masters of Pwn’📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Pwn2Own Vancouver: 15th annual hacking event pays out $1.2m for high-impact security bugs
Tesla, Microsoft, and others targeted in hacking competition that saw Star Labs crowned ‘Masters of Pwn’
🕴 Why the Employee Experience Is Cyber Resilience 🕴
📖 Read
via "Dark Reading".
A culture of trust, combined with tools designed around EX, can work in tandem to help organizations become more resilient and secure.📖 Read
via "Dark Reading".
Dark Reading
Why the Employee Experience Is Cyber Resilience
A culture of trust, combined with tools designed around employee experience, can work in tandem to help organizations become more resilient and secure.
‼ CVE-2022-29004 ‼
📖 Read
via "National Vulnerability Database".
Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29005 ‼
📖 Read
via "National Vulnerability Database".
Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41714 ‼
📖 Read
via "National Vulnerability Database".
In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user can download arbitrary files on the Tipask server such as .env, /etc/passwd, laravel.log, causing infomation leakage.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1811 ‼
📖 Read
via "National Vulnerability Database".
Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30017 ‼
📖 Read
via "National Vulnerability Database".
Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30014 ‼
📖 Read
via "National Vulnerability Database".
Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30016 ‼
📖 Read
via "National Vulnerability Database".
Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28932 ‼
📖 Read
via "National Vulnerability Database".
D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.📖 Read
via "National Vulnerability Database".
🕴 Linux Trojan XorDdos Attacks Surge, Targeting Cloud, IoT 🕴
📖 Read
via "Dark Reading".
Analysts have seen a massive spike in malicious activity by the XorDdos trojan in the last six months, against Linux cloud and IoT infrastructures .📖 Read
via "Dark Reading".
Dark Reading
Linux Trojan XorDdos Attacks Surge, Targeting Cloud, IoT
Analysts have seen a massive spike in malicious activity by the XorDdos Trojan in the last six months, against Linux cloud and IoT infrastructures .
🔏 HHS Warns Healthcare Industry of Russian Threat Groups 🔏
📖 Read
via "".
A new alert, via the HHS Cybersecurity Program, is reminding healthcare organizations about four Russian threat groups.📖 Read
via "".
‼ CVE-2022-31466 ‼
📖 Read
via "National Vulnerability Database".
Quick Heal Total Security before 12.1.1.27 has a TOCTOU race condition that leads to privilege escalation. It may follow a symlink that was created after a malware check.📖 Read
via "National Vulnerability Database".