🛡 Cybersecurity & Privacy 🛡 - News
@cibsecurity
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-23952 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.

📖 Read

via "National Vulnerability Database".
146 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-23951 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.

📖 Read

via "National Vulnerability Database".
155 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-23942 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.

📖 Read

via "National Vulnerability Database".
171 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-23943 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.

📖 Read

via "National Vulnerability Database".
188 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-24081 ‼

Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before v4.2.170210 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the reason and location fields of the visits listing page.

📖 Read

via "National Vulnerability Database".
226 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-23950 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.

📖 Read

via "National Vulnerability Database".
261 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-23938 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.

📖 Read

via "National Vulnerability Database".
301 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-38779 ‼

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

📖 Read

via "National Vulnerability Database".
380 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 How to Stop Attackers That Target Healthcare Imaging Data 🕴

Attribute-based encryption could help keep sensitive metadata off of the Dark Web.

📖 Read

via "Dark Reading".
Dark Reading
How to Stop Attackers That Target Healthcare Imaging Data
Attribute-based encryption could help keep sensitive metadata off of the Dark Web.
436 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-24108 ‼

MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code.

📖 Read

via "National Vulnerability Database".
480 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-0947 ‼

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.

📖 Read

via "National Vulnerability Database".
551 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-2883 ‼

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

📖 Read

via "National Vulnerability Database".
572 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-24107 ‼

hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code.

📖 Read

via "National Vulnerability Database".
604 views
🛡 Cybersecurity & Privacy 🛡 - News
🗓️ Cisco ClamAV anti-malware scanner vulnerable to serious security flaw 🗓️

Patch released for bug that poses a critical risk to vulnerable technologies

📖 Read

via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Cisco ClamAV anti-malware scanner vulnerable to serious security flaw
Patch released for bug that poses a critical risk to vulnerable technologies
👍2🔥1
560 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Exploit Code Released for Critical Fortinet RCE Bug 🕴

Organizations are urged to update to the latest versions of FortiNAC to patch a flaw that allows unauthenticated attackers to write arbitrary files on the system.

📖 Read

via "Dark Reading".
Dark Reading
Exploit Code Released for Critical Fortinet RCE Bug
Organizations are urged to update to the latest versions of FortiNAC to patch a flaw that allows unauthenticated attackers to write arbitrary files on the system.
505 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Trend Micro Acquires SOC Technology Expert Anlyz 🕴

Technology tuck-in enhances industry's broadest XDR security platform.

📖 Read

via "Dark Reading".
Dark Reading
Trend Micro Acquires SOC Technology Expert Anlyz
Technology tuck-in enhances industry's broadest XDR security platform.
401 views
🛡 Cybersecurity & Privacy 🛡 - News
🛠 Zeek 5.0.7 🛠

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek's user community includes major universities, research labs, supercomputing centers, and open-science communities. This is the source code release.

📖 Read

via "Packet Storm Security".
Packetstormsecurity
Zeek 5.0.7 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
👍1
341 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-41217 ‼

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.

📖 Read

via "National Vulnerability Database".
303 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-41216 ‼

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system.

📖 Read

via "National Vulnerability Database".
289 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Xcitium Brings 'Zero Dwell' Capability to Legacy EDR Platforms 🕴



📖 Read

via "Dark Reading".
Dark Reading
Xcitium Brings 'Zero Dwell' Capability to Legacy EDR Platforms
BLOOMFIELD, N.J., Feb. 21, 2023 (GLOBE NEWSWIRE) -- Xcitium, a security platform provider focused on preventing damage caused by Malware, today announced availability of its advanced endpoint security solution, ZeroDwell Containment, for customers with or…
302 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-23063 ‼

Cellinx NVT v1.0.6.002b is vulnerable to local file disclosure.

📖 Read

via "National Vulnerability Database".
275 views