‼ CVE-2022-38059 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Alexey Trofimov's Access Code Feeder plugin <= 1.0.3 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-37404 ‼
📖 Read
via "National Vulnerability Database".
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christian Salazar's add2fav plugin <= 1.0 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38285 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36422 ‼
📖 Read
via "National Vulnerability Database".
Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38096 ‼
📖 Read
via "National Vulnerability Database".
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38279 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36873 ‼
📖 Read
via "National Vulnerability Database".
Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3147 ‼
📖 Read
via "National Vulnerability Database".
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35725 ‼
📖 Read
via "National Vulnerability Database".
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.📖 Read
via "National Vulnerability Database".
❤1
⚠ S3 Ep99: TikTok “attack” – was there a data breach, or not? [Audio + Text] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now! (Or read if you prefer - full transcript inside.)📖 Read
via "Naked Security".
Naked Security
S3 Ep99: TikTok “attack” – was there a data breach, or not? [Audio + Text]
Latest episode – listen now! (Or read if you prefer – full transcript inside.)
⚠ How to deal with dates and times without any timezone tantrums… ⚠
📖 Read
via "Naked Security".
Heartfelt encouragement to embrace RFC 3339 - find out why!📖 Read
via "Naked Security".
Naked Security
How to deal with dates and times without any timezone tantrums…
Heartfelt encouragement to embrace RFC 3339 – find out why!
📢 UK, US condemn Iran for ‘unprecedented’ cyber attack against Albania 📢
📖 Read
via "ITPro".
The Balkan nation has cut ties with Iran following the hack, which took down national infrastructure and exposed government information📖 Read
via "ITPro".
IT PRO
UK, US condemn Iran for ‘unprecedented’ cyber attack against Albania | IT PRO
The Balkan nation has cut ties with Iran following the hack, which took down national infrastructure and exposed government information
📢 DrayTek Vigor 2866ax review: Faster than you might expect 📢
📖 Read
via "ITPro".
A versatile and very affordable SMB security router with Wi-Fi 6 and top-notch WAN redundancy📖 Read
via "ITPro".
IT PRO
DrayTek Vigor 2866ax review: Faster than you might expect | IT PRO
A versatile and very affordable SMB security router with Wi-Fi 6 and top-notch WAN redundancy
📢 Thoma Bravo pulls plug on Darktrace takeover 📢
📖 Read
via "ITPro".
Shares in the UK cyber firm slumped 30%, as investors had pinned hopes on takeover deal📖 Read
via "ITPro".
IT PRO
Thoma Bravo pulls plug on Darktrace takeover | IT PRO
Shares in the UK cyber firm slumped 30%, as investors had pinned hopes on takeover deal
📢 HP patches high-severity security flaw in its own support tool 📢
📖 Read
via "ITPro".
The application that's installed in every HP desktop and notebook was allowing hackers to elevate privileges through a DLL hijacking vulnerability📖 Read
via "ITPro".
IT PRO
HP patches high-severity security flaw in its own support tool | IT PRO
The application that's installed in every HP desktop and notebook was allowing hackers to elevate privileges through a DLL hijacking vulnerability
‼ CVE-2022-28742 ‼
📖 Read
via "National Vulnerability Database".
aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application does not validate user session when accessing many application pages. This can allow an attacker to gain unauthenticated access to sensitive functionalities in the application📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28741 ‼
📖 Read
via "National Vulnerability Database".
aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to missing input validation in v5.x📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36617 ‼
📖 Read
via "National Vulnerability Database".
Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38614 ‼
📖 Read
via "National Vulnerability Database".
An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38613 ‼
📖 Read
via "National Vulnerability Database".
A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40317 ‼
📖 Read
via "National Vulnerability Database".
OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.📖 Read
via "National Vulnerability Database".