πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2023-2467 β€Ό

Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a crafted HTML page. (Chromium security severity: Low)

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-2464 β€Ό

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. (Chromium security severity: Medium)

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-2460 β€Ό

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium)

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-2462 β€Ό

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. (Chromium security severity: Medium)

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-2468 β€Ό

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page. (Chromium security severity: Low)

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-2461 β€Ό

Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-2465 β€Ό

Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

πŸ“– Read

via "National Vulnerability Database".
πŸ“’ Bolstering cyber security with the right channel partnerships πŸ“’

Organizations must draw on the expertise of their channel partners to support in-house security operations

πŸ“– Read

via "ITPro".
πŸ“’ WatchGuard Firebox T85-PoE review: Big security in small spaces πŸ“’

A table-top appliance offering tough security measures for SMBs and remote offices at a great price

πŸ“– Read

via "ITPro".
β€Ό CVE-2023-23790 β€Ό

Cross-Site Request Forgery (CSRF) vulnerability in Pods Framework Team Pods Γ’β‚¬β€œ Custom Content Types and Fields plugin <=Γ‚ 2.9.10.2 versions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-25786 β€Ό

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Thom Stark Eyes Only: User Access Shortcode plugin <=Γ‚ 1.8.2 versions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-25787 β€Ό

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wbolt team WP?????? plugin <=Γ‚ 1.3.9 versions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30995 β€Ό

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-25789 β€Ό

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tapfiliate plugin <=Γ‚ 3.0.12 versions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3405 β€Ό

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-25783 β€Ό

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Moss FireCask Like & Share Button plugin <=Γ‚ 1.1.5 versions.

πŸ“– Read

via "National Vulnerability Database".
πŸ‘1
β€Ό CVE-2023-25792 β€Ό

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin <=Γ‚ 5.0 versions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-25784 β€Ό

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bon Plan Gratos Sticky Ad Bar pluginΓ‚ <= 1.3.1 versions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-25797 β€Ό

Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <=Γ‚ 4.1.2 versions.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Palo Alto Networks Unveils New Cloud Firewall for Azure πŸ•΄

The next-generation cloud firewall is a fully managed Azure-native ISV service.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Hotels at Risk From Bug in Oracle Property Management Software πŸ•΄

Oracle's characterization of the vulnerability in its Opera software as complex and hard to exploit is incorrect, researchers who found the flaw and reported it say.

πŸ“– Read

via "Dark Reading".