‼ CVE-2022-44311 ‼
📖 Read
via "National Vulnerability Database".
html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44320 ‼
📖 Read
via "National Vulnerability Database".
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41757 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44317 ‼
📖 Read
via "National Vulnerability Database".
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall.📖 Read
via "National Vulnerability Database".
⚠ Silk Road drugs market hacker pleads guilty, faces 20 years inside ⚠
📖 Read
via "Naked Security".
Jurisprudence isn't like arithmetic... two negatives never make a positive!📖 Read
via "Naked Security".
Naked Security
Silk Road drugs market hacker pleads guilty, faces 20 years inside
Jurisprudence isn’t like arithmetic… two negatives never make a positive!
‼ CVE-2022-44556 ‼
📖 Read
via "National Vulnerability Database".
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40303 ‼
📖 Read
via "National Vulnerability Database".
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39069 ‼
📖 Read
via "National Vulnerability Database".
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.📖 Read
via "National Vulnerability Database".
📢 LockBit repeats 'PR stunt' as Thales ransomware investigation reveals no breach 📢
📖 Read
via "ITPro".
The ransomware group threatened to leak stolen data on the dark web, but Thales denies any attack occurred📖 Read
via "ITPro".
ITPro
LockBit repeats 'PR stunt' as Thales ransomware investigation reveals no breach
The ransomware group threatened to leak stolen data on the dark web, but Thales denies any attack occurred
📢 Microsoft says “it’s just too difficult” to effectively disrupt ransomware 📢
📖 Read
via "ITPro".
The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy📖 Read
via "ITPro".
ITPro
Microsoft says “it’s just too difficult” to effectively disrupt ransomware
The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy
📢 Continental 'held to ransom', refuses to confirm if LockBit has stolen data 📢
📖 Read
via "ITPro".
The ransomware group is threatening to leak the data it has on the German manufacturer tonight if a ransom isn't paid📖 Read
via "ITPro".
ITPro
Continental 'held to ransom', refuses to confirm if LockBit has stolen data
The ransomware group is threatening to leak the data it has on the German manufacturer tonight if a ransom isn't paid
‼ CVE-2022-41980 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44741 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40205 ‼
📖 Read
via "National Vulnerability Database".
Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42494 ‼
📖 Read
via "National Vulnerability Database".
Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40223 ‼
📖 Read
via "National Vulnerability Database".
Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43491 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30545 ‼
📖 Read
via "National Vulnerability Database".
Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39377 ‼
📖 Read
via "National Vulnerability Database".
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40206 ‼
📖 Read
via "National Vulnerability Database".
Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27855 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress allows Plugin Settings Change.📖 Read
via "National Vulnerability Database".