🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-45315 ‼

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows attackers to execute arbitrary code via a crafted packet.

📖 Read

via "National Vulnerability Database".

243 views17:39

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-45478 ‼

Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

📖 Read

via "National Vulnerability Database".

222 views17:39

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32596 ‼

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446213; Issue ID: ALPS07446213.

📖 Read

via "National Vulnerability Database".

208 views17:39

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32624 ‼

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405923; Issue ID: ALPS07405923.

📖 Read

via "National Vulnerability Database".

201 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32629 ‼

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310774; Issue ID: ALPS07310774.

📖 Read

via "National Vulnerability Database".

194 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-4269 ‼

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.

📖 Read

via "National Vulnerability Database".

189 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32625 ‼

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326216; Issue ID: ALPS07326216.

📖 Read

via "National Vulnerability Database".

179 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32633 ‼

In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441637; Issue ID: ALPS07441637.

📖 Read

via "National Vulnerability Database".

179 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32621 ‼

In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310829; Issue ID: ALPS07310829.

📖 Read

via "National Vulnerability Database".

186 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32594 ‼

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446207; Issue ID: ALPS07446207.

📖 Read

via "National Vulnerability Database".

182 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32598 ‼

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228.

📖 Read

via "National Vulnerability Database".

184 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32597 ‼

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228.

📖 Read

via "National Vulnerability Database".

191 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-45313 ‼

Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message.

📖 Read

via "National Vulnerability Database".

196 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32620 ‼

In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07541753; Issue ID: ALPS07541753.

📖 Read

via "National Vulnerability Database".

200 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32622 ‼

In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363786; Issue ID: ALPS07363786.

📖 Read

via "National Vulnerability Database".

225 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32631 ‼

In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453613; Issue ID: ALPS07453613.

📖 Read

via "National Vulnerability Database".

247 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32630 ‼

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405966; Issue ID: ALPS07405966.

📖 Read

via "National Vulnerability Database".

270 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-32628 ‼

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310780; Issue ID: ALPS07310780.

📖 Read

via "National Vulnerability Database".

321 views17:40

🛡 Cybersecurity & Privacy 🛡 - News

⚠ Ping of death! FreeBSD fixes crashtastic bug in network tool ⚠

It's a venerable program, and this version had a venerable bug in it.

📖 Read

via "Naked Security".

Naked Security

Ping of death! FreeBSD fixes crashtastic bug in network tool

It’s a venerable program, and this version had a venerable bug in it.

319 views18:15

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-3837 ‼

The Uji Countdown WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

📖 Read

via "National Vulnerability Database".

285 views19:39

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-3892 ‼

The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

📖 Read

via "National Vulnerability Database".

256 views19:39

About

Blog

Apps

Platform