⚠ Silk Road drugs market hacker pleads guilty, faces 20 years inside ⚠
📖 Read
via "Naked Security".
Jurisprudence isn't like arithmetic... two negatives never make a positive!📖 Read
via "Naked Security".
Naked Security
Silk Road drugs market hacker pleads guilty, faces 20 years inside
Jurisprudence isn’t like arithmetic… two negatives never make a positive!
‼ CVE-2022-44556 ‼
📖 Read
via "National Vulnerability Database".
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40303 ‼
📖 Read
via "National Vulnerability Database".
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39069 ‼
📖 Read
via "National Vulnerability Database".
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.📖 Read
via "National Vulnerability Database".
📢 LockBit repeats 'PR stunt' as Thales ransomware investigation reveals no breach 📢
📖 Read
via "ITPro".
The ransomware group threatened to leak stolen data on the dark web, but Thales denies any attack occurred📖 Read
via "ITPro".
ITPro
LockBit repeats 'PR stunt' as Thales ransomware investigation reveals no breach
The ransomware group threatened to leak stolen data on the dark web, but Thales denies any attack occurred
📢 Microsoft says “it’s just too difficult” to effectively disrupt ransomware 📢
📖 Read
via "ITPro".
The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy📖 Read
via "ITPro".
ITPro
Microsoft says “it’s just too difficult” to effectively disrupt ransomware
The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy
📢 Continental 'held to ransom', refuses to confirm if LockBit has stolen data 📢
📖 Read
via "ITPro".
The ransomware group is threatening to leak the data it has on the German manufacturer tonight if a ransom isn't paid📖 Read
via "ITPro".
ITPro
Continental 'held to ransom', refuses to confirm if LockBit has stolen data
The ransomware group is threatening to leak the data it has on the German manufacturer tonight if a ransom isn't paid
‼ CVE-2022-41980 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44741 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40205 ‼
📖 Read
via "National Vulnerability Database".
Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42494 ‼
📖 Read
via "National Vulnerability Database".
Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40223 ‼
📖 Read
via "National Vulnerability Database".
Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43491 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30545 ‼
📖 Read
via "National Vulnerability Database".
Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39377 ‼
📖 Read
via "National Vulnerability Database".
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40206 ‼
📖 Read
via "National Vulnerability Database".
Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27855 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress allows Plugin Settings Change.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-33321 ‼
📖 Read
via "National Vulnerability Database".
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password). The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38137 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Analytify plugin <= 4.2.2 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27914 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in com_media.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43481 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Coupons for WooCommerce Coupons plugin <= 4.5 on WordPress leading to notice dismissal.📖 Read
via "National Vulnerability Database".