‼ CVE-2022-31830 ‼
📖 Read
via "National Vulnerability Database".
Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23138 ‼
📖 Read
via "National Vulnerability Database".
ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31393 ‼
📖 Read
via "National Vulnerability Database".
Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40961 ‼
📖 Read
via "National Vulnerability Database".
CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32272 ‼
📖 Read
via "National Vulnerability Database".
OPSWAT MetaDefender Core (MDCore) before 5.1.2 has incorrect access control, resulting in privilege escalation.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31827 ‼
📖 Read
via "National Vulnerability Database".
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2035 ‼
📖 Read
via "National Vulnerability Database".
A reflected cross-site scripting (XSS) vulnerability exists in the playerConfUrl parameter in the /defaultui/player/modern.html file for SCORM Engine versions < 20.1.45.914, 21.1.x < 21.1.7.219. The issue exists because there are no limitations on the domain or format of the url supplied by the user, allowing an attacker to craft malicious urls which can trigger a reflected XSS payload in the context of a victim's browser.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31386 ‼
📖 Read
via "National Vulnerability Database".
A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.📖 Read
via "National Vulnerability Database".
🕴 How AI Is Useful — and Not Useful — for Cybersecurity 🕴
📖 Read
via "Dark Reading".
AI works best when security professionals and AI are complementing each other.📖 Read
via "Dark Reading".
Dark Reading
How AI Is Useful — and Not Useful — for Cybersecurity
AI works best when security professionals and AI are complementing each other.
🕴 Want Better Security? Up Your Collaboration Game 🕴
📖 Read
via "Dark Reading".
BAE Systems' Peder Jungck joins Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to discuss the importance of collaboration.📖 Read
via "Dark Reading".
Darkreading
Want Better Security? Up Your Collaboration Game
BAE Systems' Peder Jungck joins Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to discuss the importance of collaboration.
🕴 Sophos: Keeping Tabs on the Bad Guys Using Threat Research 🕴
📖 Read
via "Dark Reading".
Sophos' John Shier joins Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to discuss the ransomware problem.📖 Read
via "Dark Reading".
Darkreading
Sophos: Keeping Tabs on the Bad Guys Using Threat Research
Sophos' John Shier joins Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to discuss the ransomware problem.
🕴 Cisco Revamps Cloud Security Strategy With New Secure Access, SASE Portfolio 🕴
📖 Read
via "Dark Reading".
The company's vision for the future of cloud security is based on simplified, horizontal coverage across multiple cloud platforms.📖 Read
via "Dark Reading".
Dark Reading
Cisco Revamps Cloud Security Strategy With New Secure Access, SASE Portfolio
The company's vision for the future of cloud security is based on simplified, horizontal coverage across multiple cloud platforms.
👍1
🔏 Key RSA Takeaways From a Newly Minted Digital Guardian 🔏
📖 Read
via "".
HelpSystems' new Director of Product Management, Data Protection, Wade Barisoff, gives his first impressions of RSA Conference 2022.📖 Read
via "".
❌ Feds Forced Travel Firms to Share Surveillance Data on Hacker ❌
📖 Read
via "Threat Post".
Sabre and Travelport had to report the weekly activities of former “Cardplanet” cybercriminal Aleksei Burkov for two years, info that eventually led to his arrest and prosecution.📖 Read
via "Threat Post".
Threat Post
Feds Forced Travel Firms to Share Surveillance Data on Hacker
Sabre and Travelport had to report the weekly activities of former “Cardplanet” cybercriminal Aleksei Burkov for two years, info that eventually led to his arrest and prosecution.
🕴 Cisco Makes Resilience a Cornerstone of Security Strategy 🕴
📖 Read
via "Dark Reading".
Cisco's Jeetu Patel joins Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to discuss the power of information sharing.📖 Read
via "Dark Reading".
Darkreading
Cisco Makes Resilience a Cornerstone of Security Strategy
Cisco's Jeetu Patel joins Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to discuss the power of information sharing.
‼ CVE-2022-2027 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2019-25066 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1.32 is able to address this issue. The name of the patch is 7aa146b724e0e20cfee2c71ca78fafbf53a8767c. It is recommended to upgrade the affected component.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2029 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2014 ‼
📖 Read
via "National Vulnerability Database".
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2015 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24969 ‼
📖 Read
via "National Vulnerability Database".
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.📖 Read
via "National Vulnerability Database".