🕴 Phishing in the Cloud: We're Gonna Need a Bigger Boat 🕴
📖 Read
via "Dark Reading".
SasS security is everyone's problem.📖 Read
via "Dark Reading".
Dark Reading
Phishing in the Cloud: We're Gonna Need a Bigger Boat
SasS security is everyone's problem.
🕴 Interpres Security Emerges from Stealth to Help Companies to Optimize Security Performance 🕴
📖 Read
via "Dark Reading".
Startup raises $8.5 million in seed funding led by Ten Eleven Ventures.📖 Read
via "Dark Reading".
Dark Reading
Interpres Security Emerges from Stealth to Help Companies to Optimize Security Performance
Startup raises $8.5 million in seed funding led by Ten Eleven Ventures.
🛠TOR Virtual Network Tunneling Tool 0.4.7.12 ðŸ›
📖 Read
via "Packet Storm Security".
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs). This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
TOR Virtual Network Tunneling Tool 0.4.7.12 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠Wireshark Analyzer 4.0.2 ðŸ›
📖 Read
via "Packet Storm Security".
Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Wireshark Analyzer 4.0.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2022-45509 ‼
📖 Read
via "National Vulnerability Database".
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41802 ‼
📖 Read
via "National Vulnerability Database".
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39903 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45523 ‼
📖 Read
via "National Vulnerability Database".
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45501 ‼
📖 Read
via "National Vulnerability Database".
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39915 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45511 ‼
📖 Read
via "National Vulnerability Database".
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45499 ‼
📖 Read
via "National Vulnerability Database".
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39902 ‼
📖 Read
via "National Vulnerability Database".
Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4364 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as critical has been found in Teledyne FLIR AX8 up to 1.46.16. Affected is an unknown function of the file palette.php of the component Web Service Handler. The manipulation of the argument palette leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-215118 is the identifier assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45506 ‼
📖 Read
via "National Vulnerability Database".
Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38754 ‼
📖 Read
via "National Vulnerability Database".
A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45505 ‼
📖 Read
via "National Vulnerability Database".
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39904 ‼
📖 Read
via "National Vulnerability Database".
Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the Network Access Identifier via log.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45508 ‼
📖 Read
via "National Vulnerability Database".
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4123 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45507 ‼
📖 Read
via "National Vulnerability Database".
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.📖 Read
via "National Vulnerability Database".