‼ CVE-2023-27771 ‼
📖 Read
via "National Vulnerability Database".
An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_full10819.exe file.📖 Read
via "National Vulnerability Database".
⚠ Researchers claim they can bypass Wi-Fi encryption (briefly, at least) ⚠
📖 Read
via "Naked Security".
They can't read much of your data, but even a few stray network packets could tell them something they're not supposed to know.📖 Read
via "Naked Security".
Naked Security
Researchers claim they can bypass Wi-Fi encryption (briefly, at least)
They can’t read much of your data, but even a few stray network packets could tell them something they’re not supposed to know.
🕴 What RASP Should Have Been 🕴
📖 Read
via "Dark Reading".
When runtime application self-protection is held to a higher standard, it can secure thousands of applications and prevent burnout in security teams.📖 Read
via "Dark Reading".
Dark Reading
What RASP Should Have Been
When runtime application self-protection is held to a higher standard, it can secure thousands of applications and prevent burnout in security teams.
⚠ Einstein tilings – the amazing “Hat” shape that never repeats! ⚠
📖 Read
via "Naked Security".
Imagine tiling a whole football field using a single shape... yet not being able to produce a repeating pattern, even if you wanted to.📖 Read
via "Naked Security".
Naked Security
Einstein tilings – the amazing “Hat” shape that never repeats!
Imagine tiling a whole football field using a single shape… yet not being able to produce a repeating pattern, even if you wanted to.
🕴 15M+ Services & Apps Remain Sitting Ducks for Known Exploits 🕴
📖 Read
via "Dark Reading".
Scans of the Internet find that millions of computers, virtual machines, and containers are vulnerable to one or more of the hundreds of cyberattacks currently used in the wild, despite being patchable.📖 Read
via "Dark Reading".
Dark Reading
15M+ Services & Apps Remain Sitting Ducks for Known Exploits
Scans of the Internet find that millions of computers, virtual machines, and containers are vulnerable to one or more of the hundreds of cyberattacks currently used in the wild, despite being patchable.
‼ CVE-2023-1752 ‼
📖 Read
via "National Vulnerability Database".
The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48227 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and Identify x86, aka CORE-7361.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1749 ‼
📖 Read
via "National Vulnerability Database".
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1748 ‼
📖 Read
via "National Vulnerability Database".
The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1750 ‼
📖 Read
via "National Vulnerability Database".
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27487 ‼
📖 Read
via "National Vulnerability Database".
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the client may bypass JSON Web Token (JWT) checks and forge fake original paths. The header `x-envoy-original-path` should be an internal header, but Envoy does not remove this header from the request at the beginning of request processing when it is sent from an untrusted client. The faked header would then be used for trace logs and grpc logs, as well as used in the URL used for `jwt_authn` checks if the `jwt_authn` filter is used, and any other upstream use of the x-envoy-original-path header. Attackers may forge a trusted `x-envoy-original-path` header. Versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9 have patches for this issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28613 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1751 ‼
📖 Read
via "National Vulnerability Database".
The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which leak a deviceId.📖 Read
via "National Vulnerability Database".
🕴 Mysterious 'Rorschach' Ransomware Doubles Known Encryption Speeds 🕴
📖 Read
via "Dark Reading".
The malware is one of the most sophisticated ransomwares ever seen in the wild, and marks a leap ahead for cybercrime.📖 Read
via "Dark Reading".
Dark Reading
Mysterious 'Rorschach' Ransomware Doubles Known Encryption Speeds
The malware is one of the most sophisticated ransomwares ever seen in the wild, and marks a leap ahead for cybercrime.
‼ CVE-2023-27491 ‼
📖 Read
via "National Vulnerability Database".
Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27089 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27492 ‼
📖 Read
via "National Vulnerability Database".
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the Lua filter is vulnerable to denial of service. Attackers can send large request bodies for routes that have Lua filter enabled and trigger crashes. As of versions versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, Envoy no longer invokes the Lua coroutine if the filter has been reset. As a workaround for those whose Lua filter is buffering all requests/ responses, mitigate by using the buffer filter to avoid triggering the local reply in the Lua filter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27091 ‼
📖 Read
via "National Vulnerability Database".
An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27488 ‼
📖 Read
via "National Vulnerability Database".
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, escalation of privileges is possible when `failure_mode_allow: true` is configured for `ext_authz` filter. For affected components that are used for logging and/or visibility, requests may not be logged by the receiving service. When Envoy was configured to use ext_authz, ext_proc, tap, ratelimit filters, and grpc access log service and an http header with non-UTF-8 data was received, Envoy would generate an invalid protobuf message and send it to the configured service. The receiving service would typically generate an error when decoding the protobuf message. For ext_authz that was configured with ``failure_mode_allow: true``, the request would have been allowed in this case. For the other services, this could have resulted in other unforeseen errors such as a lack of visibility into requests. As of versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, Envoy by default sanitizes the values sent in gRPC service calls to be valid UTF-8, replacing data that is not valid UTF-8 with a `!` character. This behavioral change can be temporarily reverted by setting runtime guard `envoy.reloadable_features.service_sanitize_non_utf8_strings` to false. As a workaround, one may set `failure_mode_allow: false` for `ext_authz`.📖 Read
via "National Vulnerability Database".
♟️ FBI Seizes Bot Shop ‘Genesis Market’ Amid Arrests Targeting Operators, Suppliers ♟️
📖 Read
via "Krebs on Security".
Several domain names tied to Genesis Market, a bustling cybercrime store that sold access to passwords and other data stolen from millions of computers infected with malicious software, were seized by the Federal Bureau of Investigation (FBI) today. Sources tell KrebsOnsecurity the domain seizures coincided with "dozens" of arrests in the United States and abroad targeting those who allegedly operated the service, as well as suppliers who continuously fed Genesis Market with freshly-stolen data.📖 Read
via "Krebs on Security".
Krebs on Security
FBI Seizes Bot Shop ‘Genesis Market’ Amid Arrests Targeting Operators, Suppliers
Several domain names tied to Genesis Market, a bustling cybercrime store that sold access to passwords and other data stolen from millions of computers infected with malicious software, were seized by the Federal Bureau of Investigation (FBI) today. Sources…
😱1
🕴 eFile Tax Return Software Found Serving Up Malware 🕴
📖 Read
via "Dark Reading".
In the height of tax-return season, a popular tax prep software service leaves a malicious JavaScript file online for weeks.📖 Read
via "Dark Reading".
Dark Reading
eFile Tax Return Software Found Serving Up Malware
In the height of tax-return season, a popular tax prep software service leaves a malicious JavaScript file online for weeks.