πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-31912 β€Ό

Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=delete_team.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31910 β€Ό

Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting (XSS). via /otps/classes/Master.php.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31906 β€Ό

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31908 β€Ό

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31372 β€Ό

Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler.

πŸ“– Read

via "National Vulnerability Database".
πŸ‘2
β€Ό CVE-2022-31913 β€Ό

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31300 β€Ό

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31911 β€Ό

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.

πŸ“– Read

via "National Vulnerability Database".
⚠ Follina gets fixed – but it’s not listed in the Patch Tuesday patches! ⚠

We tried it out to make sure, so you don't have to.

πŸ“– Read

via "Naked Security".
⚠ S3 Ep87: Follina, AirTags, ID theft and the Law of Big Numbers [Podcast] ⚠

Lastest epsiode - listen now!

πŸ“– Read

via "Naked Security".
πŸ•΄ RSAC Startup Competition Focuses on Post-Cloud IT Infrastructure πŸ•΄

A secure Web browser takes the top prize, and for the second year in a row malware detection is an afterthought.

πŸ“– Read

via "Dark Reading".
πŸ” 4 Ways You Can Use Your Digital Rights Management Tool πŸ”

Having a Digital Rights Management tool can help your team collaborate in the cloud while meeting compliance needs and adhering to your organization's data security policies.

πŸ“– Read

via "".
πŸ•΄ EU & US Unite to Fight Ransomware πŸ•΄

A working group of European and US officials meet at The Hague to collaborate on ransomware operations and strategies.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2022-27532 β€Ό

A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31298 β€Ό

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31384 β€Ό

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31914 β€Ό

Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22953 β€Ό

VMware HCX update addresses an information disclosure vulnerability. A malicious actor with network user access to the VMware HCX appliance may be able to gain access to sensitive information.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30661 β€Ό

Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29865 β€Ό

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31383 β€Ό

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php.

πŸ“– Read

via "National Vulnerability Database".