⚠ OpenSSH fixes double-free memory bug that’s pokable over the network ⚠
📖 Read
via "Naked Security".
It's a bug fix for a bug fix. A memory leak was turned into a double-free that has now been turned into correct code...📖 Read
via "Naked Security".
Naked Security
OpenSSH fixes double-free memory bug that’s pokable over the network
It’s a bug fix for a bug fix. A memory leak was turned into a double-free that has now been turned into correct code…
‼ CVE-2021-36226 ‼
📖 Read
via "National Vulnerability Database".
Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36225 ‼
📖 Read
via "National Vulnerability Database".
Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44343 ‼
📖 Read
via "National Vulnerability Database".
CRMEB 4.4.4 is vulnerable to Any File download.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29416 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36224 ‼
📖 Read
via "National Vulnerability Database".
Western Digital My Cloud devices before OS5 have a nobody account with a blank password.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27628 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48085 ‼
📖 Read
via "National Vulnerability Database".
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-0679 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220220.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48164 ‼
📖 Read
via "National Vulnerability Database".
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45722 ‼
📖 Read
via "National Vulnerability Database".
ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability.📖 Read
via "National Vulnerability Database".
⚠ Finnish psychotherapy extortion suspect arrested in France ⚠
📖 Read
via "Naked Security".
Company transcribed ultra-personal conversations, didn't secure them. Criminal stole them, then extorted thousands of vulnerable patients.📖 Read
via "Naked Security".
Naked Security
Finnish psychotherapy extortion suspect arrested in France
Company transcribed ultra-personal conversations, didn’t secure them. Criminal stole them, then extorted thousands of vulnerable patients.
🗓️ Google engineers plot to mitigate prototype pollution 🗓️
📖 Read
via "The Daily Swig".
Plan to create boundary between JavaScript objects and their blueprints gathers momentum📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Google engineers plot to mitigate prototype pollution
Plan to create boundary between JavaScript objects and their blueprints gathers momentum
🛠 GNUnet P2P Framework 0.19.3 🛠
📖 Read
via "Packet Storm Security".
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP (IPv4 and IPv6), TCP (IPv4 and IPv6), HTTP, or SMTP messages. GNUnet supports accounting to provide contributing nodes with better service. The primary service build on top of the framework is anonymous file sharing.📖 Read
via "Packet Storm Security".
Packetstormsecurity
GNUnet P2P Framework 0.19.3 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2023-24200 ‼
📖 Read
via "National Vulnerability Database".
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24192 ‼
📖 Read
via "National Vulnerability Database".
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48078 ‼
📖 Read
via "National Vulnerability Database".
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24198 ‼
📖 Read
via "National Vulnerability Database".
Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24197 ‼
📖 Read
via "National Vulnerability Database".
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24202 ‼
📖 Read
via "National Vulnerability Database".
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24194 ‼
📖 Read
via "National Vulnerability Database".
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php.📖 Read
via "National Vulnerability Database".
👍1