‼ CVE-2022-29093 ‼
📖 Read
via "National Vulnerability Database".
Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29095 ‼
📖 Read
via "National Vulnerability Database".
Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to execution of malicious code on a vulnerable system.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-21211 ‼
📖 Read
via "National Vulnerability Database".
This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable (not a function), and then it will crash with type-check.📖 Read
via "National Vulnerability Database".
📢 What is shoulder surfing? 📢
📖 Read
via "ITPro".
This social engineering technique can pose a major security risk, so here's how to best protect against it📖 Read
via "ITPro".
IT PRO
What is shoulder surfing? | IT PRO
This social engineering technique can pose a major security risk, so here's how to best protect against it
📢 Palermo ransomware attack: Vice Society claims responsibility as city details recovery strategy 📢
📖 Read
via "ITPro".
The Italian municipality is attempting to defy attackers by restoring its systems from backups📖 Read
via "ITPro".
IT PRO
Palermo ransomware attack: Vice Society claims responsibility as city details recovery strategy | IT PRO
The Italian municipality is attempting to defy attackers by restoring its systems from backups
📢 How does a SQL injection attack work? 📢
📖 Read
via "ITPro".
Understanding one of the simplest, yet most effective, methods of cyber attack📖 Read
via "ITPro".
IT PRO
How does a SQL injection attack work? | IT PRO
Understanding one of the simplest, yet most effective, methods of cyber attack
🤔2
‼ CVE-2018-25037 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack may be launched remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25039 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25034 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25035 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25036 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25038 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41641 ‼
📖 Read
via "National Vulnerability Database".
Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2054 ‼
📖 Read
via "National Vulnerability Database".
Command Injection in GitHub repository nuitka/nuitka prior to 0.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2013 ‼
📖 Read
via "National Vulnerability Database".
In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space.📖 Read
via "National Vulnerability Database".
‼ CVE-2017-20041 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28704 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connected to the Internet with the authentication information unchanged from the default settings.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27231 ‼
📖 Read
via "National Vulnerability Database".
Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26041 ‼
📖 Read
via "National Vulnerability Database".
Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32740 ‼
📖 Read
via "National Vulnerability Database".
A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29894 ‼
📖 Read
via "National Vulnerability Database".
Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege.📖 Read
via "National Vulnerability Database".