🛡 Cybersecurity & Privacy 🛡 - News
@cibsecurity
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-20251 ‼

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.

📖 Read

via "National Vulnerability Database".
403 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-3424 ‼

A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

📖 Read

via "National Vulnerability Database".
461 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1240 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
408 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1239 ‼

Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
407 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1242 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
390 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-3760 ‼

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia-Med.This issue affects Mia-Med: before 1.0.0.58.

📖 Read

via "National Vulnerability Database".
332 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1243 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
280 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1238 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
266 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1247 ‼

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 11.0.0.

📖 Read

via "National Vulnerability Database".
288 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1244 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
343 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1237 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
364 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1241 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
368 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1245 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

📖 Read

via "National Vulnerability Database".
395 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Cyber Security Works to Rebrand As Securin Inc. 🕴

Securin Inc. will provide tech-enabled security solutions, vulnerability intelligence and deep domain expertise.

📖 Read

via "Dark Reading".
Dark Reading
Cyber Security Works to Rebrand As Securin Inc.
Securin Inc. will provide tech-enabled security solutions, vulnerability intelligence and deep domain expertise.
344 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Ransomware's Favorite Target: Critical Infrastructure and Its Industrial Control Systems 🕴

The health, manufacturing, and energy sectors are the most vulnerable to ransomware.

📖 Read

via "Dark Reading".
Dark Reading
Ransomware's Favorite Target: Critical Infrastructure and Its Industrial Control Systems
The health, manufacturing, and energy sectors are the most vulnerable to ransomware.
273 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Optiv Launches Full Suite of Operational Technology Services 🕴



📖 Read

via "Dark Reading".
Dark Reading
Optiv Launches Full Suite of Operational Technology Services
DENVER, March 7, 2023 /PRNewswire/ -- Digitization and the heavy adoption of connected devices are enabling organizations to reach new heights and, at the same time, have intensified the threat landscape and extended the attack surface. As organizations work…
253 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-26955 ‼

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module.

📖 Read

via "National Vulnerability Database".
227 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2020-36669 ‼

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.3.9. This is due to missing nonce validation on the backup_guard_get_import_backup() function. This makes it possible for unauthenticated attackers to upload arbitrary files to the vulnerable site's server via a forged request, granted they can trick a site's administrator into performing an action such as clicking on a link.

📖 Read

via "National Vulnerability Database".
227 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-44197 ‼

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126.

📖 Read

via "National Vulnerability Database".
213 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-26954 ‼

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module.

📖 Read

via "National Vulnerability Database".
218 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2021-4330 ‼

The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file type upon extracting uploaded Zip files in the installFreeTemplateKit and uploadTemplateKitZipFile functions. This makes it possible for attackers with contributor-lever permissions and above to upload arbitrary files and potentially gain remote code execution in versions up to and including 1.0.13 of Template Kit – Import and versions up to and including 2.0.10 of Envato Elements & Download.

📖 Read

via "National Vulnerability Database".
224 views