‼ CVE-2022-0722 ‼
📖 Read
via "National Vulnerability Database".
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40897 ‼
📖 Read
via "National Vulnerability Database".
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2217 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40895 ‼
📖 Read
via "National Vulnerability Database".
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40899 ‼
📖 Read
via "National Vulnerability Database".
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40896 ‼
📖 Read
via "National Vulnerability Database".
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40898 ‼
📖 Read
via "National Vulnerability Database".
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files.📖 Read
via "National Vulnerability Database".
🔏 What is Intellectual Property? Understanding IP Rights, Negligence, Infringement & More 🔏
📖 Read
via "".
What is intellectual property? We define the term and explain how IP negligence and infringement can harm your organization.📖 Read
via "".
Digital Guardian
What is Intellectual Property? Understanding IP Rights, Negligence, Infringement & More
What is intellectual property? We define the term and explain how IP negligence and infringement can harm your organization.
🗓️ Oracle patches ‘miracle exploit’ impacting Middleware Fusion, cloud services 🗓️
📖 Read
via "The Daily Swig".
Researchers describe discovery of ‘mega’ zero-day📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Oracle patches ‘miracle exploit’ impacting Middleware Fusion, cloud services
Researchers describe discovery of ‘mega’ zero-day
🕴 It's a Race to Secure the Software Supply Chain — Have You Already Stumbled? 🕴
📖 Read
via "Dark Reading".
If you haven't properly addressed the issue, you're already behind. But even if you've had a false start, it's never too late to get back up.📖 Read
via "Dark Reading".
Dark Reading
It's a Race to Secure the Software Supply Chain — Have You Already Stumbled?
If you haven't properly addressed the issue, you're already behind. But even if you've had a false start, it's never too late to get back up.
⚠ OpenSSL issues a bugfix for the previous bugfix ⚠
📖 Read
via "Naked Security".
Fortunately, it's not a major bugfix, which means it's easy to patch and can teach us all some useful lessons.📖 Read
via "Naked Security".
Naked Security
OpenSSL issues a bugfix for the previous bugfix
Fortunately, it’s not a major bugfix, which means it’s easy to patch and can teach us all some useful lessons.
‼ CVE-2021-40900 ‼
📖 Read
via "National Vulnerability Database".
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40901 ‼
📖 Read
via "National Vulnerability Database".
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2218 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2216 ‼
📖 Read
via "National Vulnerability Database".
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2208 ‼
📖 Read
via "National Vulnerability Database".
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2207 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.📖 Read
via "National Vulnerability Database".
🕴 Thrive Acquires DSM 🕴
📖 Read
via "Dark Reading".
DSM is now the third acquisition by Thrive in Florida in the past six months.📖 Read
via "Dark Reading".
Dark Reading
Thrive Acquires DSM
DSM is now the third acquisition by Thrive in Florida in the past six months.
⚠ FTC warns of LGBTQ+ extortion scams – be aware before you share! ⚠
📖 Read
via "Naked Security".
It's a simple jingle and it's solid advice: "If in doubt, don't give it out!"📖 Read
via "Naked Security".
Naked Security
FTC warns of LGBTQ+ extortion scams – be aware before you share!
It’s a simple jingle and it’s solid advice: “If in doubt, don’t give it out!”
🗓️ Untrusted types: Researcher demos trick to beat Trusted Types protection in Google Chrome 🗓️
📖 Read
via "The Daily Swig".
Flaws in protection mechanism leaves websites more exposed to DOM XSS-based attacks📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Untrusted types: Researcher demos trick to beat Trusted Types protection in Google Chrome
Flaws in protection mechanism leaves websites more exposed to DOM XSS-based attacks
‼ CVE-2017-20101 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.📖 Read
via "National Vulnerability Database".