‼ CVE-2022-34928 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27618 ‼
📖 Read
via "National Vulnerability Database".
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34968 ‼
📖 Read
via "National Vulnerability Database".
An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL query.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36800 ‼
📖 Read
via "National Vulnerability Database".
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34943 ‼
📖 Read
via "National Vulnerability Database".
Laravel v5.1 was discovered to contain a remote code execution (RCE) vulnerability via the component ChanceGenerator in __call.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27619 ‼
📖 Read
via "National Vulnerability Database".
Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Client before 2.2.2-609 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27616 ‼
📖 Read
via "National Vulnerability Database".
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 7.0.1-42218-3 allows remote authenticated users to execute arbitrary commands via unspecified vectors.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34969 ‼
📖 Read
via "National Vulnerability Database".
PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34937 ‼
📖 Read
via "National Vulnerability Database".
Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34967 ‼
📖 Read
via "National Vulnerability Database".
The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-27620 ‼
📖 Read
via "National Vulnerability Database".
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors.📖 Read
via "National Vulnerability Database".
🕴 5 Ways Chess Can Inspire Strategic Cybersecurity Thinking 🕴
📖 Read
via "Dark Reading".
Rising interest in chess may feed the next generation of cybersecurity experts.📖 Read
via "Dark Reading".
Dark Reading
5 Ways Chess Can Inspire Strategic Cybersecurity Thinking
Rising interest in chess may feed the next generation of cybersecurity experts.
👍1
🗓️ Jenkins security: Unpatched XSS, CSRF bugs included in latest plugin advisory 🗓️
📖 Read
via "The Daily Swig".
‘We believe that announcing vulnerabilities without a fix is the best solution for a difficult problem’📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Jenkins security: Unpatched XSS, CSRF bugs included in latest plugin advisory
‘We believe that announcing vulnerabilities without a fix is the best solution for a difficult problem’
🕴 Netskope Acquires Infiot, Will Deliver Fully Integrated, Single-Vendor SASE Platform 🕴
📖 Read
via "Dark Reading".
Converged SASE platform provides AI-driven Zero trust security and simplified, optimized connectivity to any network location or device, including IoT.📖 Read
via "Dark Reading".
Dark Reading
Netskope Acquires Infiot, Will Deliver Fully Integrated, Single-Vendor SASE Platform
Converged SASE platform provides AI-driven Zero trust security and simplified, optimized connectivity to any network location or device, including IoT.
⚠ Cryptocoin “token swapper” Nomad loses $200 million in coding blunder ⚠
📖 Read
via "Naked Security".
Transactions were only approved, it seems, if they were initiated by... errrrr, by anyone.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 CompTIA CEO Outlines Initiative to Create the Pre-eminent Destination to Start, Build and ‘Supercharge’ a Tech Career 🕴
📖 Read
via "Dark Reading".
Todd Thibodeaux uses ChannelCon 2022 state of the industry remarks to unveil CompTIA’s Project Agora; invites broad industry participation in the effort to fight for tech talent.📖 Read
via "Dark Reading".
Dark Reading
CompTIA CEO Outlines Initiative to Create the Pre-eminent Destination to Start, Build and ‘Supercharge’ a Tech Career
Todd Thibodeaux uses ChannelCon 2022 state of the industry remarks to unveil CompTIA’s Project Agora; invites broad industry participation in the effort to fight for tech talent.
👍1
🕴 Druva Introduces the Data Resiliency Guarantee of up to $10 Million 🕴
📖 Read
via "Dark Reading".
The new program offers robust protection across all five data risk categories: cyber, human, application, operation, and environmental.📖 Read
via "Dark Reading".
Dark Reading
Druva Introduces the Data Resiliency Guarantee of up to $10 Million
The new program offers robust protection across all five data risk categories: cyber, human, application, operation, and environmental.
🗓️ Swiss government announces upcoming launch of federal bug bounty program 🗓️
📖 Read
via "The Daily Swig".
Switzerland Bug Bounty AG awarded program management contract📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Swiss government announces upcoming launch of federal bug bounty program
Bug Bounty Switzerland AG awarded program management contract
❌ VMWare Urges Users to Patch Critical Authentication Bypass Bug ❌
📖 Read
via "Threat Post".
Vulnerability—for which a proof-of-concept is forthcoming—is one of a string of flaws the company fixed that could lead to an attack chain.📖 Read
via "Threat Post".
Threat Post
VMWare Urges Users to Patch Critical Authentication Bypass Bug
Vulnerability—for which a proof-of-concept is forthcoming—is one of a string of flaws the company fixed that could lead to an attack chain.
🕴 ShiftLeft Appoints Prevention-First, Cybersecurity Visionary and AI/ML Pioneer Stuart McClure as CEO 🕴
📖 Read
via "Dark Reading".
Serial entrepreneur, cybersecurity leader, and industry veteran joins ShiftLeft to drive growth and AI/ML innovation globally.📖 Read
via "Dark Reading".
Dark Reading
ShiftLeft Appoints Prevention-First, Cybersecurity Visionary and AI/ML Pioneer Stuart McClure as CEO
Serial entrepreneur, cybersecurity leader, and industry veteran joins ShiftLeft to drive growth and AI/ML innovation globally.
‼ CVE-2022-23442 ‼
📖 Read
via "National Vulnerability Database".
An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands.📖 Read
via "National Vulnerability Database".