‼ CVE-2022-41294 ‼
📖 Read
via "National Vulnerability Database".
IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42457 ‼
📖 Read
via "National Vulnerability Database".
Generex CS141 before 2.08 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39279 ‼
📖 Read
via "National Vulnerability Database".
discourse-chat is a plugin for the Discourse message board which adds chat functionality. In versions prior to 0.9 some places render a chat channel's name and description in an unsafe way, allowing staff members to cause an cross site scripting (XSS) attack by inserting unsafe HTML into them. Version 0.9 has addressed this issue. Users are advised to upgrade. There are no known workarounds for this issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27810 ‼
📖 Read
via "National Vulnerability Database".
It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode (when asserts were enabled). This issue affects Hermes versions prior to v0.12.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39284 ‼
📖 Read
via "National Vulnerability Database".
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `true` in `Config\Cookie` is not reflected in `set_cookie()` or `Response::setCookie()`. As a result cookie values are erroneously exposed to scripts. It should be noted that this vulnerability does not affect session cookies. Users are advised to upgrade to v4.2.7 or later. Users unable to upgrade are advised to manually construct their cookies either by setting the options in code or by constructing Cookie objects. Examples of each workaround are available in the linked GHSA.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41355 ‼
📖 Read
via "National Vulnerability Database".
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leave_system/classes/Master.php?f=delete_department.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26236 ‼
📖 Read
via "National Vulnerability Database".
The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26238 ‼
📖 Read
via "National Vulnerability Database".
The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40494 ‼
📖 Read
via "National Vulnerability Database".
NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.📖 Read
via "National Vulnerability Database".
🕴 Sharing Knowledge at 44CON 🕴
📖 Read
via "Dark Reading".
The infosec conference named after the UK's calling code returned this year with a focus on building a healthy community.📖 Read
via "Dark Reading".
Darkreading
Sharing Knowledge at 44CON
The infosec conference named after the UK's calling code returned this year with a focus on building a healthy community.
📢 China cracks down on citizens' anti-censorship tools with Great Firewall upgrades 📢
📖 Read
via "ITPro".
This new discovery comes a week before a predicted major reshuffle of leadership in the Chinese Communist Party📖 Read
via "ITPro".
IT PRO
China cracks down on citizens' anti-censorship tools with Great Firewall upgrades | IT PRO
This new discovery comes a week before a predicted major reshuffle of leadership in the Chinese Communist Party
📢 Sophos 2021 Antivirus solutions review 📢
📖 Read
via "ITPro".
Low-cost consumer security products for Mac and Windows📖 Read
via "ITPro".
IT PRO
Sophos 2021 Antivirus solutions review | IT PRO
Low-cost consumer security products for Mac and Windows
📢 Canadian Netwalker ransomware affiliate faces 20 years in prison and $21.5 million fine 📢
📖 Read
via "ITPro".
The Canadian hacker was arrested in Quebec after a search revealed 719 Bitcoin and hundreds of thousands of Canadian dollars believed to be stolen funds📖 Read
via "ITPro".
IT PRO
Canadian Netwalker ransomware affiliate faces 20 years in prison and $21.5 million fine | IT PRO
The Canadian hacker was arrested in Quebec after a search revealed 719 Bitcoin and hundreds of thousands of Canadian dollars believed to be stolen funds
📢 Best iPhone antivirus 📢
📖 Read
via "ITPro".
We researched the market and picked the best iPhone antivirus.📖 Read
via "ITPro".
IT PRO
Best iPhone antivirus | IT PRO
We researched the market and picked the best iPhone antivirus.
📢 Identity theft: What it is, and how it can affect your business 📢
📖 Read
via "ITPro".
Discover clear identity theft definitions, and the various forms this crime can take📖 Read
via "ITPro".
IT PRO
Identity theft: What it is, and how it can affect your business | IT PRO
Discover clear identity theft definitions, and the various forms this crime can take
📢 CISA issues fresh orders to polish security vulnerability detection in federal agencies 📢
📖 Read
via "ITPro".
The move marks the latest step in the cyber security authority's ongoing ambition to minimise the government's exposure to attacks📖 Read
via "ITPro".
IT PRO
CISA issues fresh orders to polish security vulnerability detection in federal agencies | IT PRO
The move marks the latest step in the cyber security authority's ongoing ambition to minimise the government's exposure to attacks
📢 Webroot SecureAnywhere AntiVirus review 📢
📖 Read
via "ITPro".
A compact and swift solution you won’t even notice📖 Read
via "ITPro".
IT PRO
Webroot SecureAnywhere AntiVirus review | IT PRO
A compact and swift solution you won’t even notice
📢 Beating the bad bots: Six ways to identify and block spam traffic 📢
📖 Read
via "ITPro".
Not all traffic is good. Learn how to prevent bad bots from overrunning your website📖 Read
via "ITPro".
IT PRO
Beating the bad bots: Six ways to identify and block spam traffic | IT PRO
Not all traffic is good. Learn how to prevent bad bots from overrunning your website
📢 Best business antivirus 📢
📖 Read
via "ITPro".
To help you find the ideal antivirus platform for your company, we analyzed some of the best business antivirus platforms of today📖 Read
via "ITPro".
IT PRO
Best business antivirus | IT PRO
To help you find the ideal antivirus platform for your company, we analyzed some of the best business antivirus platforms of today
🗓️ Critical flaw in open source WebPageTest remains unpatched 🗓️
📖 Read
via "The Daily Swig".
Public disclosure, a talk, and a blog post later, the RCE exploit remains unresolved📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Critical flaw in open source WebPageTest remains unpatched
Public disclosure, a talk, and a blog post later, the RCE exploit remains unresolved
‼ CVE-2022-40824 ‼
📖 Read
via "National Vulnerability Database".
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where() function.📖 Read
via "National Vulnerability Database".