🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 5 Reasons You Should Care About Unmanaged Assets 🕴

Unmanaged devices pose a significant challenge and risk for many organizations. Here are the five reasons you should care about unmanaged devices and assets.

📖 Read

via "Dark Reading".
👍1
🕴 Medusa Gang Video Shows Minneapolis School District's Ransomed Data 🕴

Much like a hostage's proof-of-life video, the ransomware gang offers the film as verification that it has the goods, and asks $1 million for the data.

📖 Read

via "Dark Reading".
CVE-2022-4317

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.

📖 Read

via "National Vulnerability Database".
CVE-2022-4462

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. This vulnerability could allow a user to unmask the Discord Webhook URL through viewing the raw API response.

📖 Read

via "National Vulnerability Database".
CVE-2023-1084

An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may create a Project Access Token with Owner level privileges using a crafted request.

📖 Read

via "National Vulnerability Database".
CVE-2023-0483

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site.

📖 Read

via "National Vulnerability Database".
🕴 US Lawmakers Face Cyberattacks, Potential Physical Harm After DC Health Link Breach 🕴

The threat actor who posted the data for sale has claimed credit for multiple other breaches, including one at grocery platform Weee! that exposed data on more than 1.1 million customers.

📖 Read

via "Dark Reading".
🕴 IceFire Ransomware Portends a Broader Shift From Windows to Linux 🕴

IceFire has changed up its OS target in recent cyberattacks, emblematic of ransomware actors increasingly targeting Linux enterprise networks, despite the extra work involved.

📖 Read

via "Dark Reading".
🕴 AT&T Vendor Breach Exposes Data on 9M Wireless Accounts 🕴

AT&T is notifying customers of a Customer Proprietary Network Information compromise, exposing years-old upgrade details.

📖 Read

via "Dark Reading".
🕴 Forrester Study Reveals Businesses Are Insufficiently Prepared to Manage Enterprise Risks 🕴

Study underscores the clear and pressing need for real-time physical and cyber threat alerts for effective enterprise risk management and business resilience.

📖 Read

via "Dark Reading".
🕴 ThreatBlockr Announces Partnership With Engaged Security Partners 🕴

This strategic partnership highlights the importance of breach prevention and creating a proactive security culture.

📖 Read

via "Dark Reading".
🕴 Avast Introduces Avast One Platinum 🕴

New premium service provides all-in-one personal protection beyond device security to include identity restoration and unlimited 24/7 tech support.

📖 Read

via "Dark Reading".
CVE-2023-27212

A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.

📖 Read

via "National Vulnerability Database".
CVE-2023-26957

onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.

📖 Read

via "National Vulnerability Database".
CVE-2023-27210

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php.

📖 Read

via "National Vulnerability Database".
CVE-2023-27213

Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php.

📖 Read

via "National Vulnerability Database".
CVE-2023-1302

A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file normal/borrow1.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222663.

📖 Read

via "National Vulnerability Database".
CVE-2022-4331

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible previously removed malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM token to perform actions on the group.

📖 Read

via "National Vulnerability Database".
CVE-2023-27202

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.

📖 Read

via "National Vulnerability Database".
CVE-2023-20049

A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause a line card to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of malformed BFD packets that are received on line cards where the BFD hardware offload feature is enabled. An attacker could exploit this vulnerability by sending a crafted IPv4 BFD packet to an affected device. A successful exploit could allow the attacker to cause line card exceptions or a hard reset, resulting in loss of traffic over that line card while the line card reloads.

📖 Read

via "National Vulnerability Database".