‼ CVE-2022-32482 ‼
📖 Read
via "National Vulnerability Database".
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46679 ‼
📖 Read
via "National Vulnerability Database".
Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27538 ‼
📖 Read
via "National Vulnerability Database".
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.📖 Read
via "National Vulnerability Database".
📢 US extradites French ShinyHunters hacker, faces 123 years in prison 📢
📖 Read
via "ITPro".
The hacker is believed to be a member of the hacking group known for its spree of data breaches across 2020 and 2021📖 Read
via "ITPro".
ITPro
US extradites French ShinyHunters hacker, faces 123 years in prison
The hacker is believed to be a member of the hacking group known for its spree of data breaches across 2020 and 2021
📢 The IT Pro Podcast: The problem with APIs 📢
📖 Read
via "ITPro".
With API attacks on the rise, knowing your attack surface is crucial📖 Read
via "ITPro".
ITPro
The IT Pro Podcast: The problem with APIs
With API attacks on the rise, knowing your attack surface is crucial
📢 Podcast transcript: The problem with APIs 📢
📖 Read
via "ITPro".
Read the full transcript for this episode of the IT Pro Podcast📖 Read
via "ITPro".
ITPro
Podcast transcript: The problem with APIs
Read the full transcript for this episode of the IT Pro Podcast
🗓️ Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’ 🗓️
📖 Read
via "The Daily Swig".
Printer exploit chain could be weaponized to fully compromise more than 100 models📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’
Printer exploit chain could be weaponized to fully compromise more than 100 models
‼ CVE-2023-0610 ‼
📖 Read
via "National Vulnerability Database".
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0609 ‼
📖 Read
via "National Vulnerability Database".
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.📖 Read
via "National Vulnerability Database".
🕴 Google Fi Users Caught Up in T-Mobile Breach 🕴
📖 Read
via "Dark Reading".
Google Fi mobile customers have been alerted that their SIM card serial numbers, phone numbers, and other data were exposed in T-Mobile hack.📖 Read
via "Dark Reading".
Dark Reading
Google Fi Users Caught Up in T-Mobile Breach
Google Fi mobile customers have been alerted that their SIM card serial numbers, phone numbers, and other data were exposed in T-Mobile hack.
‼ CVE-2022-47717 ‼
📖 Read
via "National Vulnerability Database".
Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23127 ‼
📖 Read
via "National Vulnerability Database".
In Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers therefore not enforcing HTTPS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47002 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22575 ‼
📖 Read
via "National Vulnerability Database".
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog. A low privileges user could potentially exploit this vulnerability, leading to information disclosure and escalation of privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47714 ‼
📖 Read
via "National Vulnerability Database".
Last Yard 22.09.8-1 does not enforce HSTS headers📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22573 ‼
📖 Read
via "National Vulnerability Database".
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47715 ‼
📖 Read
via "National Vulnerability Database".
In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23131 ‼
📖 Read
via "National Vulnerability Database".
Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23132 ‼
📖 Read
via "National Vulnerability Database".
Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0613 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipulation of the argument device_web_ip leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219937 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22574 ‼
📖 Read
via "National Vulnerability Database".
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and denial of service.📖 Read
via "National Vulnerability Database".