πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-44313 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44312 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44316 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44318 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44321 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44319 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44314 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-43343 β€Ό

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44311 β€Ό

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44320 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41757 β€Ό

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44317 β€Ό

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall.

πŸ“– Read

via "National Vulnerability Database".
⚠ Silk Road drugs market hacker pleads guilty, faces 20 years inside ⚠

Jurisprudence isn't like arithmetic... two negatives never make a positive!

πŸ“– Read

via "Naked Security".
β€Ό CVE-2022-44556 β€Ό

Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-40303 β€Ό

perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-39069 β€Ό

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.

πŸ“– Read

via "National Vulnerability Database".
πŸ“’ LockBit repeats 'PR stunt' as Thales ransomware investigation reveals no breach πŸ“’

The ransomware group threatened to leak stolen data on the dark web, but Thales denies any attack occurred

πŸ“– Read

via "ITPro".
πŸ“’ Microsoft says β€œit’s just too difficult” to effectively disrupt ransomware πŸ“’

The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy

πŸ“– Read

via "ITPro".
πŸ“’ Continental 'held to ransom', refuses to confirm if LockBit has stolen data πŸ“’

The ransomware group is threatening to leak the data it has on the German manufacturer tonight if a ransom isn't paid

πŸ“– Read

via "ITPro".
β€Ό CVE-2022-41980 β€Ό

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44741 β€Ό

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.

πŸ“– Read

via "National Vulnerability Database".