‼ CVE-2022-27616 ‼
📖 Read
via "National Vulnerability Database".
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 7.0.1-42218-3 allows remote authenticated users to execute arbitrary commands via unspecified vectors.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34969 ‼
📖 Read
via "National Vulnerability Database".
PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34937 ‼
📖 Read
via "National Vulnerability Database".
Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34967 ‼
📖 Read
via "National Vulnerability Database".
The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-27620 ‼
📖 Read
via "National Vulnerability Database".
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors.📖 Read
via "National Vulnerability Database".
🕴 5 Ways Chess Can Inspire Strategic Cybersecurity Thinking 🕴
📖 Read
via "Dark Reading".
Rising interest in chess may feed the next generation of cybersecurity experts.📖 Read
via "Dark Reading".
Dark Reading
5 Ways Chess Can Inspire Strategic Cybersecurity Thinking
Rising interest in chess may feed the next generation of cybersecurity experts.
👍1
🗓️ Jenkins security: Unpatched XSS, CSRF bugs included in latest plugin advisory 🗓️
📖 Read
via "The Daily Swig".
‘We believe that announcing vulnerabilities without a fix is the best solution for a difficult problem’📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Jenkins security: Unpatched XSS, CSRF bugs included in latest plugin advisory
‘We believe that announcing vulnerabilities without a fix is the best solution for a difficult problem’
🕴 Netskope Acquires Infiot, Will Deliver Fully Integrated, Single-Vendor SASE Platform 🕴
📖 Read
via "Dark Reading".
Converged SASE platform provides AI-driven Zero trust security and simplified, optimized connectivity to any network location or device, including IoT.📖 Read
via "Dark Reading".
Dark Reading
Netskope Acquires Infiot, Will Deliver Fully Integrated, Single-Vendor SASE Platform
Converged SASE platform provides AI-driven Zero trust security and simplified, optimized connectivity to any network location or device, including IoT.
⚠ Cryptocoin “token swapper” Nomad loses $200 million in coding blunder ⚠
📖 Read
via "Naked Security".
Transactions were only approved, it seems, if they were initiated by... errrrr, by anyone.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 CompTIA CEO Outlines Initiative to Create the Pre-eminent Destination to Start, Build and ‘Supercharge’ a Tech Career 🕴
📖 Read
via "Dark Reading".
Todd Thibodeaux uses ChannelCon 2022 state of the industry remarks to unveil CompTIA’s Project Agora; invites broad industry participation in the effort to fight for tech talent.📖 Read
via "Dark Reading".
Dark Reading
CompTIA CEO Outlines Initiative to Create the Pre-eminent Destination to Start, Build and ‘Supercharge’ a Tech Career
Todd Thibodeaux uses ChannelCon 2022 state of the industry remarks to unveil CompTIA’s Project Agora; invites broad industry participation in the effort to fight for tech talent.
👍1
🕴 Druva Introduces the Data Resiliency Guarantee of up to $10 Million 🕴
📖 Read
via "Dark Reading".
The new program offers robust protection across all five data risk categories: cyber, human, application, operation, and environmental.📖 Read
via "Dark Reading".
Dark Reading
Druva Introduces the Data Resiliency Guarantee of up to $10 Million
The new program offers robust protection across all five data risk categories: cyber, human, application, operation, and environmental.
🗓️ Swiss government announces upcoming launch of federal bug bounty program 🗓️
📖 Read
via "The Daily Swig".
Switzerland Bug Bounty AG awarded program management contract📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Swiss government announces upcoming launch of federal bug bounty program
Bug Bounty Switzerland AG awarded program management contract
❌ VMWare Urges Users to Patch Critical Authentication Bypass Bug ❌
📖 Read
via "Threat Post".
Vulnerability—for which a proof-of-concept is forthcoming—is one of a string of flaws the company fixed that could lead to an attack chain.📖 Read
via "Threat Post".
Threat Post
VMWare Urges Users to Patch Critical Authentication Bypass Bug
Vulnerability—for which a proof-of-concept is forthcoming—is one of a string of flaws the company fixed that could lead to an attack chain.
🕴 ShiftLeft Appoints Prevention-First, Cybersecurity Visionary and AI/ML Pioneer Stuart McClure as CEO 🕴
📖 Read
via "Dark Reading".
Serial entrepreneur, cybersecurity leader, and industry veteran joins ShiftLeft to drive growth and AI/ML innovation globally.📖 Read
via "Dark Reading".
Dark Reading
ShiftLeft Appoints Prevention-First, Cybersecurity Visionary and AI/ML Pioneer Stuart McClure as CEO
Serial entrepreneur, cybersecurity leader, and industry veteran joins ShiftLeft to drive growth and AI/ML innovation globally.
‼ CVE-2022-23442 ‼
📖 Read
via "National Vulnerability Database".
An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32293 ‼
📖 Read
via "National Vulnerability Database".
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36359 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35620 ‼
📖 Read
via "National Vulnerability Database".
D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35619 ‼
📖 Read
via "National Vulnerability Database".
D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function ssdpcgi_main.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27484 ‼
📖 Read
via "National Vulnerability Database".
A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34973 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.📖 Read
via "National Vulnerability Database".