πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Visibility Is as Vital as Zero Trust for Low-Code/No-Code Security πŸ•΄

By authenticating and authorizing every application, and by maintaining data lineage for auditing, enterprises can reduce the chances of data exfiltration.

πŸ“– Read

via "Dark Reading".
πŸ•΄ DoControl's 2023 SaaS Security Threat Landscape Report Finds Enterprises and Mid-Market Organizations Have Exposed Public SaaS Assets πŸ•΄

Volume of SaaS assets and events magnifies risks associated with manual management and remediation.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-24127 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-5026 β€Ό

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 193662.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24117 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth_5g parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24126 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4_5g parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24120 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24125 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2_5g parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24124 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24121 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-5001 β€Ό

IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24123 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-22738 β€Ό

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Assigning existing users to a different organizations is currently possible. It may lead to unintended access: if a user from organization A is accidentally assigned to organization B, they will retain their permissions and therefore might be able to access stuff they should not be allowed to access. This issue is patched in version 3.8.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24118 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24122 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid_5g parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24119 β€Ό

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Ermetic Adds Kubernetes Security to CNAPP πŸ•΄

The automated capabilities can discover misconfigurations, compliance violations, and risk or excessive privileges in Kubernetes clusters.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-1146 β€Ό

Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-0228 β€Ό

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations allows Man in the Middle Attack.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.

πŸ“– Read

via "National Vulnerability Database".
πŸ‘1