‼ CVE-2022-36875 ‼
📖 Read
via "National Vulnerability Database".
Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36870 ‼
📖 Read
via "National Vulnerability Database".
Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38064 ‼
📖 Read
via "National Vulnerability Database".
OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38701 ‼
📖 Read
via "National Vulnerability Database".
OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36376 ‼
📖 Read
via "National Vulnerability Database".
Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40133 ‼
📖 Read
via "National Vulnerability Database".
A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36876 ‼
📖 Read
via "National Vulnerability Database".
Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36858 ‼
📖 Read
via "National Vulnerability Database".
A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38059 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Alexey Trofimov's Access Code Feeder plugin <= 1.0.3 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-37404 ‼
📖 Read
via "National Vulnerability Database".
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christian Salazar's add2fav plugin <= 1.0 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38285 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36422 ‼
📖 Read
via "National Vulnerability Database".
Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38096 ‼
📖 Read
via "National Vulnerability Database".
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38279 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36873 ‼
📖 Read
via "National Vulnerability Database".
Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3147 ‼
📖 Read
via "National Vulnerability Database".
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35725 ‼
📖 Read
via "National Vulnerability Database".
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.📖 Read
via "National Vulnerability Database".
❤1
⚠ S3 Ep99: TikTok “attack” – was there a data breach, or not? [Audio + Text] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now! (Or read if you prefer - full transcript inside.)📖 Read
via "Naked Security".
Naked Security
S3 Ep99: TikTok “attack” – was there a data breach, or not? [Audio + Text]
Latest episode – listen now! (Or read if you prefer – full transcript inside.)
⚠ How to deal with dates and times without any timezone tantrums… ⚠
📖 Read
via "Naked Security".
Heartfelt encouragement to embrace RFC 3339 - find out why!📖 Read
via "Naked Security".
Naked Security
How to deal with dates and times without any timezone tantrums…
Heartfelt encouragement to embrace RFC 3339 – find out why!
📢 UK, US condemn Iran for ‘unprecedented’ cyber attack against Albania 📢
📖 Read
via "ITPro".
The Balkan nation has cut ties with Iran following the hack, which took down national infrastructure and exposed government information📖 Read
via "ITPro".
IT PRO
UK, US condemn Iran for ‘unprecedented’ cyber attack against Albania | IT PRO
The Balkan nation has cut ties with Iran following the hack, which took down national infrastructure and exposed government information
📢 DrayTek Vigor 2866ax review: Faster than you might expect 📢
📖 Read
via "ITPro".
A versatile and very affordable SMB security router with Wi-Fi 6 and top-notch WAN redundancy📖 Read
via "ITPro".
IT PRO
DrayTek Vigor 2866ax review: Faster than you might expect | IT PRO
A versatile and very affordable SMB security router with Wi-Fi 6 and top-notch WAN redundancy