πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-3523 β€Ό

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211020.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3526 β€Ό

A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3530 β€Ό

A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function ipaddr_link_get of the file ip/ipaddress.c of the component iproute2. The manipulation leads to memory leak. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211028.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3527 β€Ό

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function ipneigh_get of the file ip/ipneigh.c of the component iproute2. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211025 was assigned to this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3528 β€Ό

A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function mptcp_addr_show of the file ip/ipmptcp.c of the component iproute2. The manipulation leads to memory leak. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. VDB-211026 is the identifier assigned to this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3529 β€Ό

A vulnerability has been found in Linux Kernel and classified as problematic. Affected by this vulnerability is the function fdb_get of the file bridge/fdb.c of the component iproute2. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211027.

πŸ“– Read

via "National Vulnerability Database".
πŸ“’ Latest Microsoft Edge updates target employee onboarding, preventing malware attacks πŸ“’

Microsoft unveiled a wide range of upgrades and features for its flagship browser at its annual Ignite conference this week

πŸ“– Read

via "ITPro".
πŸ“’ Mormon Church reveals data breach seven months after incident transpired πŸ“’

The church said that federal authorities suspect the breach was part of a pattern of state-sponsored cyber attacks

πŸ“– Read

via "ITPro".
πŸ“’ Malwarebytes unveils new MDR service to help bridge cyber skills gap πŸ“’

The new offering combines managed detection and response (MDR) with the vendor’s EDR technology

πŸ“– Read

via "ITPro".
πŸ“’ Will triple extortion ransomware truly take off? πŸ“’

Operators are now launching attacks with three extortion layers, but there are limitations to this model

πŸ“– Read

via "ITPro".
πŸ“’ Best antivirus for Windows 10 πŸ“’

Want to stay secure? Here's the best business-class protection around

πŸ“– Read

via "ITPro".
πŸ€”3
β€Ό CVE-2022-3281 β€Ό

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-42983 β€Ό

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3501 β€Ό

Article template contents with sensitive data could be accessed from agents without permissions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3533 β€Ό

A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_arg of the file tools/lib/bpf/usdt.c of the component BPF. The manipulation of the argument reg_name leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211031.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-2052 β€Ό

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-42975 β€Ό

socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3531 β€Ό

A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function get_syms of the file tools/testing/selftests/bpf/prog_tests/kprobe_multi_test.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier VDB-211029 was assigned to this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3532 β€Ό

A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function test_map_kptr_success/test_fentry of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. VDB-211030 is the identifier assigned to this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3534 β€Ό

A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-42980 β€Ό

go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key.

πŸ“– Read

via "National Vulnerability Database".