📢 The IT Pro Podcast: The problem with APIs 📢
📖 Read
via "ITPro".
With API attacks on the rise, knowing your attack surface is crucial📖 Read
via "ITPro".
ITPro
The IT Pro Podcast: The problem with APIs
With API attacks on the rise, knowing your attack surface is crucial
📢 Podcast transcript: The problem with APIs 📢
📖 Read
via "ITPro".
Read the full transcript for this episode of the IT Pro Podcast📖 Read
via "ITPro".
ITPro
Podcast transcript: The problem with APIs
Read the full transcript for this episode of the IT Pro Podcast
🗓️ Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’ 🗓️
📖 Read
via "The Daily Swig".
Printer exploit chain could be weaponized to fully compromise more than 100 models📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’
Printer exploit chain could be weaponized to fully compromise more than 100 models
‼ CVE-2023-0610 ‼
📖 Read
via "National Vulnerability Database".
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0609 ‼
📖 Read
via "National Vulnerability Database".
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.📖 Read
via "National Vulnerability Database".
🕴 Google Fi Users Caught Up in T-Mobile Breach 🕴
📖 Read
via "Dark Reading".
Google Fi mobile customers have been alerted that their SIM card serial numbers, phone numbers, and other data were exposed in T-Mobile hack.📖 Read
via "Dark Reading".
Dark Reading
Google Fi Users Caught Up in T-Mobile Breach
Google Fi mobile customers have been alerted that their SIM card serial numbers, phone numbers, and other data were exposed in T-Mobile hack.
‼ CVE-2022-47717 ‼
📖 Read
via "National Vulnerability Database".
Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23127 ‼
📖 Read
via "National Vulnerability Database".
In Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers therefore not enforcing HTTPS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47002 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22575 ‼
📖 Read
via "National Vulnerability Database".
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog. A low privileges user could potentially exploit this vulnerability, leading to information disclosure and escalation of privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47714 ‼
📖 Read
via "National Vulnerability Database".
Last Yard 22.09.8-1 does not enforce HSTS headers📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22573 ‼
📖 Read
via "National Vulnerability Database".
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47715 ‼
📖 Read
via "National Vulnerability Database".
In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23131 ‼
📖 Read
via "National Vulnerability Database".
Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23132 ‼
📖 Read
via "National Vulnerability Database".
Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0613 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipulation of the argument device_web_ip leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219937 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22574 ‼
📖 Read
via "National Vulnerability Database".
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23128 ‼
📖 Read
via "National Vulnerability Database".
Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23130 ‼
📖 Read
via "National Vulnerability Database".
Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23126 ‼
📖 Read
via "National Vulnerability Database".
Connectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and used to manipulate users to perform unintended actions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0611 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219935.📖 Read
via "National Vulnerability Database".