🗓️ Akamai wrestles with AWS S3 web cache poisoning bug 🗓️
📖 Read
via "The Daily Swig".
Definitive solution is ‘non-trivial’ since behavior arises from customers processing non-RFC compliant requests📖 Read
via "The Daily Swig".
‼ CVE-2022-46421 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.📖 Read
via "National Vulnerability Database".
🛠 GNU Privacy Guard 2.4.0 🛠
📖 Read
via "Packet Storm Security".
GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.📖 Read
via "Packet Storm Security".
Packetstormsecurity
GNU Privacy Guard 2.4.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 GNU Privacy Guard 2.2.41 🛠
📖 Read
via "Packet Storm Security".
GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions. This is the LTS release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
GNU Privacy Guard 2.2.41 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Protecting Hospital Networks From 'Code Dark' Scenarios 🕴
📖 Read
via "Dark Reading".
Asset inventory, behavioral baselining, and automated response are all key to keeping patients healthy and safe. 📖 Read
via "Dark Reading".
Dark Reading
Protecting Hospital Networks From 'Code Dark' Scenarios
Asset inventory, behavioral baselining, and automated response are all key to keeping patients healthy and safe.
‼ CVE-2022-45942 ‼
📖 Read
via "National Vulnerability Database".
A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46534 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speed_dir parameter at /goform/SetSpeedWan.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46549 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46531 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46544 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40624 ‼
📖 Read
via "National Vulnerability Database".
pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46550 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInfo.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46546 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46540 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45666 ‼
📖 Read
via "National Vulnerability Database".
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46532 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceMac parameter at /goform/addWifiMacFilter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46533 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46542 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46545 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45665 ‼
📖 Read
via "National Vulnerability Database".
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46547 ‼
📖 Read
via "National Vulnerability Database".
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.📖 Read
via "National Vulnerability Database".