‼ CVE-2022-31279 ‼
📖 Read
via "National Vulnerability Database".
Laravel 9.1.8, when processing attacker-controlled data for deserialization, allows Remote Code Execution (RCE) via an unserialized pop chain in __destruct in Illuminate\Broadcasting\PendingBroadcast.php and __call in Faker\Generator.php.📖 Read
via "National Vulnerability Database".
🕴 Multilevel Extortion: DeadBolt Ransomware Targets Internet-Facing NAS Devices 🕴
📖 Read
via "Dark Reading".
The innovative ransomware targets NAS devices, has a multitiered payment and extortion scheme as well as a flexible configuration, and takes a heavily automated approach.📖 Read
via "Dark Reading".
Dark Reading
Multilevel Extortion: DeadBolt Ransomware Targets Internet-Facing NAS Devices
The innovative ransomware targets NAS devices, has a multitiered payment and extortion scheme as well as a flexible configuration, and takes a heavily automated approach.
🕴 Mandia: Keep 'Shields Up' to Survive the Current Escalation of Cyberattacks 🕴
📖 Read
via "Dark Reading".
As Mandiant CEO Kevin Mandia's company prepares to become part of Google, the incident response company continues to investigate many of the most critical cyber incidents.📖 Read
via "Dark Reading".
Dark Reading
Mandia: Keep 'Shields Up' to Survive the Current Escalation of Cyberattacks
As Mandiant CEO Kevin Mandia's company prepares to become part of Google, the incident response company continues to investigate many of the most critical cyber incidents.
‼ CVE-2020-36536 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30716 ‼
📖 Read
via "National Vulnerability Database".
Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted applications to access toast message information from device.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36530 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30717 ‼
📖 Read
via "National Vulnerability Database".
Improper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications to use some camera functions via deeplink.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36531 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30725 ‼
📖 Read
via "National Vulnerability Database".
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30743 ‼
📖 Read
via "National Vulnerability Database".
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36537 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36525 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30709 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation check logic vulnerability in SECRIL prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36524 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1708 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36535 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30719 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30713 ‼
📖 Read
via "National Vulnerability Database".
Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36526 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30711 ‼
📖 Read
via "National Vulnerability Database".
Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30721 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.📖 Read
via "National Vulnerability Database".