‼ CVE-2022-48389 ‼
📖 Read
via "National Vulnerability Database".
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48370 ‼
📖 Read
via "National Vulnerability Database".
In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48374 ‼
📖 Read
via "National Vulnerability Database".
In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.📖 Read
via "National Vulnerability Database".
📢 The rise of identity-based cyber attacks and how to mitigate them 📢
📖 Read
via "ITPro".
If identity-based cyber attacks are successful, they can give hackers the opportunity to infiltrate an entire network 📖 Read
via "ITPro".
ITPro
The rise of identity-based cyber attacks and how to mitigate them
If identity-based cyber attacks are successful, they can give hackers the opportunity to infiltrate an entire network
📢 Microsoft Authenticator mandates number matching to counter MFA fatigue attacks 📢
📖 Read
via "ITPro".
The added layer of complexity aims to keep social engineering at bay 📖 Read
via "ITPro".
ITPro
Microsoft Authenticator mandates number matching to counter MFA fatigue attacks
The added layer of complexity aims to keep social engineering at bay
‼ CVE-2023-2590 ‼
📖 Read
via "National Vulnerability Database".
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23863 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin <= 2.0.22 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24372 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in USB Memory Direct Simple Custom Author Profiles plugin <=Â 1.0.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23884 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <=Â 2.5.20 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2591 ‼
📖 Read
via "National Vulnerability Database".
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.7.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23664 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ConvertBox ConvertBox Auto Embed WordPress plugin <=Â 1.0.19 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23883 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Gwyer WP Content Filter plugin <= 3.0.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23733 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joel James Lazy Social Comments plugin <=Â 2.0.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41640 ‼
📖 Read
via "National Vulnerability Database".
Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <=Â 2.1.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23732 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joel James Disqus Conditional Load plugin <=Â 11.0.6 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23734 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Voswinkel Userlike – WordPress Live Chat plugin <= 2.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23862 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical scroll recent post plugin <=Â 14.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23793 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eightweb Interactive Read More Without Refresh plugin <=Â 3.1 versions.📖 Read
via "National Vulnerability Database".
🕴 Half of npm Packages Vulnerable to Old-School Weapon: the 'Shift' Key 🕴
📖 Read
via "Dark Reading".
For years, hackers could have tricked enterprises into downloading malware by simply de-capitalizing letters.📖 Read
via "Dark Reading".
Dark Reading
Npm Packages Vulnerable to Old-School Weapon: the 'Shift' Key
For years, hackers could have tricked enterprises into downloading malware by simply de-capitalizing letters in uppercase-named npm packages.
🕴 Royal Ransomware Expands to Target Linux, VMware ESXi 🕴
📖 Read
via "Dark Reading".
The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.📖 Read
via "Dark Reading".
Dark Reading
Royal Ransomware Expands to Target Linux, VMware ESXi
The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.
♟️ Feds Take Down 13 More DDoS-for-Hire Services ♟️
📖 Read
via "Krebs on Security".
The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire services the FBI seized in December 2022, when it charged six U.S. men with computer crimes for allegedly operating booters.📖 Read
via "Krebs on Security".
Krebs on Security
Feds Take Down 13 More DDoS-for-Hire Services
The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire…