‼ CVE-2023-29579 ‼
📖 Read
via "National Vulnerability Database".
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48477 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48476 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29578 ‼
📖 Read
via "National Vulnerability Database".
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29583 ‼
📖 Read
via "National Vulnerability Database".
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29582 ‼
📖 Read
via "National Vulnerability Database".
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c.📖 Read
via "National Vulnerability Database".
🕴 The New Frontier in Email Security: Goodbye, Gateways; Hello, Behavioral AI 🕴
📖 Read
via "Dark Reading".
As email attackers move to more targeted and sophisticated attacks, email security needs to understand the organization, not past attacks, to keep up with attacker innovation and stop novel threats on the first encounter.📖 Read
via "Dark Reading".
Darkreading
The New Frontier in Email Security: Goodbye, Gateways; Hello, Behavioral AI
As email attackers move to more targeted and sophisticated attacks, email security needs to understand the organization, not past attacks, to keep up with attacker innovation and stop novel threats on the first encounter.
🕴 Cybersecurity Survival: Hide From Adversarial AI 🕴
📖 Read
via "Dark Reading".
Consider adding some security-through-obscurity tactics to your organization's protection arsenal to boost protection. Mask your attack surface behind additional zero-trust layers to remove AI's predictive advantage.📖 Read
via "Dark Reading".
Dark Reading
Cybersecurity Survival: Hide From Adversarial AI
Consider adding some security-through-obscurity tactics to your organization's protection arsenal to boost protection. Mask your attack surface behind additional zero-trust layers to remove AI's predictive advantage.
🕴 ZeroFox to Acquire LookingGlass, Broadening Global Attack Surface Intelligence Capabilities 🕴
📖 Read
via "Dark Reading".
Deal strengthens ZeroFox's External Cybersecurity Platform with attack surface management (EASM) and threat intelligence capabilities.📖 Read
via "Dark Reading".
Dark Reading
ZeroFox to Acquire LookingGlass, Broadening Global Attack Surface Intelligence Capabilities
Deal strengthens ZeroFox's External Cybersecurity Platform with attack surface management (EASM) and threat intelligence capabilities.
🕴 Cisco Unveils Solution to Rapidly Detect Advanced Cyber Threats and Automate Response 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Dark Reading
Cisco Unveils Solution to Rapidly Detect Advanced Cyber Threats and Automate Response
SAN FRANCISCO, April 24, 2023 /PRNewswire/ -- RSA CONFERENCE 2023 -- Cisco (NASDAQ: CSCO), the leader in enterprise networking and security, unveiled the latest progress towards its vision of the Cisco Security Cloud, a unified, AI-driven, cross-domain security…
‼ CVE-2022-47598 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Plugins Pro WP Super Popup plugin <= 1.1.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1731 ‼
📖 Read
via "National Vulnerability Database".
In LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2251 ‼
📖 Read
via "National Vulnerability Database".
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.2.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23892 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jamie Poitra M Chart plugin <=Â 1.9.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24819 ‼
📖 Read
via "National Vulnerability Database".
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29849 ‼
📖 Read
via "National Vulnerability Database".
Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30370 ‼
📖 Read
via "National Vulnerability Database".
In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24820 ‼
📖 Read
via "National Vulnerability Database".
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. An attacker can send a crafted frame to the device resulting in a large out of bounds write beyond the packet buffer. The write will create a hard fault exception after reaching the last page of RAM. The hard fault is not handled and the system will be stuck until reset. Thus the impact is denial of service. Version 2022.10 fixes this issue. As a workaround, apply the patch manually.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30368 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30376 ‼
📖 Read
via "National Vulnerability Database".
In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29480 ‼
📖 Read
via "National Vulnerability Database".
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.📖 Read
via "National Vulnerability Database".