βΌ CVE-2022-40204 βΌ
π Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.π Read
via "National Vulnerability Database".
βΌ CVE-2019-18265 βΌ
π Read
via "National Vulnerability Database".
Digital Alert SystemsΓ’β¬β’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in logs and rendered when viewed in the web application.π Read
via "National Vulnerability Database".
βΌ CVE-2022-46162 βΌ
π Read
via "National Vulnerability Database".
discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rendering content generated with the discourse-bccode plugin. This vulnerability only affects sites which have the discourse-bbcode plugin installed and enabled. This issue is patched in commit 91478f5. As a workaround, ensure that the Content Security Policy is enabled and monitor any posts that contain bbcode.π Read
via "National Vulnerability Database".
π’ Podcast transcript: The front line of fraud tech π’
π Read
via "ITPro".
Read the full transcript for this episode of the IT Pro Podcastπ Read
via "ITPro".
π’ Getting board-level buy-in for security strategy π’
π Read
via "ITPro".
Why cyber security needs to be a board-level issueπ Read
via "ITPro".
ITPro
Getting board-level buy-in for security strategy
Why cyber security needs to be a board-level issue
π’ "Unacceptable" data scraping lands Meta a Β£228m data protection fine π’
π Read
via "ITPro".
The much-awaited decision follows the scraping of half a billion users' data and received unanimous approval from EU regulatorsπ Read
via "ITPro".
ITPro
"Unacceptable" data scraping lands Meta a Β£228m data protection fine
The much-awaited decision follows the scraping of half a billion users' data and received unanimous approval from EU regulators
π’ The IT Pro Podcast: The front line of fraud tech π’
π Read
via "ITPro".
With tools such as deepfakes, the future of fraud tech relies on cutting edge AI as much as good security practiceπ Read
via "ITPro".
ITPro
The IT Pro Podcast: The front line of fraud tech
With tools such as deepfakes, the future of fraud tech relies on cutting edge AI as much as good security practice
π’ Hyundai vulnerability allowed remote hacking of locks, engine π’
π Read
via "ITPro".
Researchers discovered flaws in a number of apps linked to car brands that allowed for personal details and remote control of vehicles using easily-obtained IDsπ Read
via "ITPro".
ITPro
Hyundai vulnerability allowed remote hacking of locks, engine
Researchers discovered flaws in a number of apps linked to car brands that allowed for personal details and remote control of vehicles using easily-obtained IDs
π’ The NFT bubble bursting means a brighter future for crypto assets π’
π Read
via "ITPro".
Sales slump as the market decides βno one wants a gorilla with a hat onβ, but the downturn might give rise to a much brighter future for NFTsπ Read
via "ITPro".
ITPro
The NFT bubble bursting means a brighter future for crypto assets
Sales slump as the market decides βno one wants a gorilla with a hat onβ, but the downturn might give rise to a much brighter future for NFTs
π’ Best free malware removal tools 2022 π’
π Read
via "ITPro".
Worried your device is infected? Here are some of the best free tools for removing malicious software from your systemsπ Read
via "ITPro".
ITPro
6 of the best free malware removal tools in 2023
Worried your device is infected? Here are some of the best free malware removal tools at your disposal in 2023
π΄ CI Fuzz CLI Brings Fuzz Testing to Java Applications π΄
π Read
via "Dark Reading".
CI Fuzz CLI, the open source fuzzing tool with just three commands, integrates fuzz testing directly into the software development workflow.π Read
via "Dark Reading".
Dark Reading
CI Fuzz CLI Brings Fuzz Testing to Java Applications
CI Fuzz CLI, the open source fuzzing tool with just three commands, integrates fuzz testing directly into the software development workflow.
βΌ CVE-2022-45640 βΌ
π Read
via "National Vulnerability Database".
Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).π Read
via "National Vulnerability Database".
βΌ CVE-2022-45045 βΌ
π Read
via "National Vulnerability Database".
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.π Read
via "National Vulnerability Database".
βΌ CVE-2022-40849 βΌ
π Read
via "National Vulnerability Database".
ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).π Read
via "National Vulnerability Database".
βΌ CVE-2022-40489 βΌ
π Read
via "National Vulnerability Database".
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.π Read
via "National Vulnerability Database".
βΌ CVE-2022-44262 βΌ
π Read
via "National Vulnerability Database".
ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE).π Read
via "National Vulnerability Database".
βΌ CVE-2022-1471 βΌ
π Read
via "National Vulnerability Database".
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization.π Read
via "National Vulnerability Database".
βΌ CVE-2022-3270 βΌ
π Read
via "National Vulnerability Database".
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.π Read
via "National Vulnerability Database".
π΄ Guidehouse Insights Anticipates Market for Automotive Cybersecurity Solutions Will Grow to More Than $445 Billion by 2031 π΄
π Read
via "Dark Reading".
Market drivers include new regulations, increasing automobile complexity, and new vehicle types.π Read
via "Dark Reading".
Dark Reading
Guidehouse Insights Anticipates Market for Automotive Cybersecurity Solutions Will Grow to More Than $445 Billion by 2031
Market drivers include new regulations, increasing automobile complexity, and new vehicle types.
π΄ CyberRatings.org Announces Results from First-of-its-Kind Comparative Test on Cloud Network Firewall π΄
π Read
via "Dark Reading".
Ratings ranged from AAA to CC, with security effectiveness scores from 27% to 100%.π Read
via "Dark Reading".
Dark Reading
CyberRatings.org Announces Results from First-of-its-Kind Comparative Test on Cloud Network Firewall
Ratings ranged from AAA to CC, with security effectiveness scores from 27% to 100%.
π1
π΄ Data Security Concerns Are Driving Changes in US Consumer Behavior and Demands π΄
π Read
via "Dark Reading".
As consumers catch on to the dangers, protection could become a major topic for legislative bodies.π Read
via "Dark Reading".
Dark Reading
Data Security Concerns Are Driving Changes in US Consumer Behavior and Demands
As consumers catch on to the dangers, protection could become a major topic for legislative bodies.