‼ CVE-2023-30053 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29939 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29941 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29933 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30243 ‼
📖 Read
via "National Vulnerability Database".
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30434 ‼
📖 Read
via "National Vulnerability Database".
IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29942 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30013 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30054 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38707 ‼
📖 Read
via "National Vulnerability Database".
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep133: Apple takes “tight-lipped” to a whole new level ⚠
📖 Read
via "Naked Security".
Entertaining, educational, and all in plain English 🎧📖📖 Read
via "Naked Security".
Naked Security
S3 Ep133: Apple takes “tight-lipped” to a whole new level
Entertaining, educational, and all in plain English 🎧📖
⚠ World Password Day: 2 + 2 = 4 ⚠
📖 Read
via "Naked Security".
We've kept it short and simple, with no sermons, no judgmentalism, no tubthumping... and no BUY NOW buttons. Have a nice day!📖 Read
via "Naked Security".
Naked Security
World Password Day: 2 + 2 = 4
We’ve kept it short and simple, with no sermons, no judgmentalism, no tubthumping… and no BUY NOW buttons. Have a nice day!
⚠ PHP Packagist supply chain poisoned by hacker “looking for a job” ⚠
📖 Read
via "Naked Security".
I pwned you! Gizza job! You know it makes sense!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Attackers Route Malware Activity Over Popular CDNs 🕴
📖 Read
via "Dark Reading".
One way to hide malicious activity is to make it look benign by blending in with regular traffic passing through content delivery networks (CDNs) and cloud service providers, according to a Netskope report.📖 Read
via "Dark Reading".
Dark Reading
Attackers Route Malware Activity Over Popular CDNs
One way to hide malicious activity is to make it look benign by blending in with regular traffic passing through content delivery networks (CDNs) and cloud service providers, according to a Netskope report.
‼ CVE-2023-29659 ‼
📖 Read
via "National Vulnerability Database".
A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26285 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32269 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.📖 Read
via "National Vulnerability Database".
🕴 Apple Patches Bluetooth Flaw in AirPods, Beats 🕴
📖 Read
via "Dark Reading".
Users can check for the updated firmware version of their wireless headphones in the Bluetooth settings of their iPhone, iPad, or Mac devices.📖 Read
via "Dark Reading".
Dark Reading
Apple Patches Bluetooth Flaw in AirPods, Beats
Users can check for the updated firmware version of their wireless headphones in the Bluetooth settings of their iPhone, iPad, or Mac devices.
🕴 Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges 🕴
📖 Read
via "Dark Reading".
Tell other CISO's "you got a break," judge says in handing down a three-year probation sentence to Joseph Sullivan.📖 Read
via "Dark Reading".
Dark Reading
Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges
Tell other CISOs "you got a break," judge says in handing down a three-year probation sentence to Joseph Sullivan.
‼ CVE-2023-2427 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-4914 ‼
📖 Read
via "National Vulnerability Database".
IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 191290.📖 Read
via "National Vulnerability Database".