🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
‼ CVE-2023-31617 ‼

An issue in the dk_set_delete component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31609 ‼

An issue in the dfe_unit_col_loci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31615 ‼

An issue in the chash_array component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31628 ‼

An issue in the stricmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31607 ‼

An issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31624 ‼

An issue in the sinv_check_exp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31630 ‼

An issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31631 ‼

An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31611 ‼

An issue in the __libc_longjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31618 ‼

An issue in the sqlc_union_dt_wrap component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31613 ‼

An issue in the __nss_database_lookup component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31622 ‼

An issue in the sqlc_make_policy_trig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

📖 Read

via "National Vulnerability Database".
âš  Zut alors! Raclage crapuleux! Clearview AI in 20% more trouble in France âš 

We asked you once, we told you twice, now we're ordering you for the third time...

📖 Read

via "Naked Security".
‼ CVE-2023-30245 ‼

SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the crit_id parameter of the edit_criteria.php file.

📖 Read

via "National Vulnerability Database".
🕴 Breaking the DDoS Attack Loop With Rate Limiting 🕴

This Tech Tip demonstrates how security engineers can best use rate limits to mitigate distributed denial-of-service attacks.

📖 Read

via "Dark Reading".
🕴 Toyota Discloses Decade-Long Data Leak Exposing 2.15M Customers' Data 🕴

A misconfigured cloud instance exposed vehicle data, but not personally identifiable information, the car maker says.

📖 Read

via "Dark Reading".
🕴 Generative AI Empowers Users but Challenges Security 🕴

With the introduction of generative AI, even more business users are going to create low-code/no-code applications. Prepare to protect them.

📖 Read

via "Dark Reading".
🕴 RA Ransomware Group Emerges With Custom Spin on Babuk 🕴

The freshly minted ransomware gang is customizing leaked Babuk source code to go after cyber targets in the US and South Korea — and it's expanding its operations quickly.

📖 Read

via "Dark Reading".
🕴 PharMerica Leaks 5.8M Deceased Users' PII, Health Information 🕴

Relatives are being alerted that a PharMerica compromise exposed the sensitive data of their deceased loved ones, which could be used for identity theft.

📖 Read

via "Dark Reading".
🕴 Lacework Appoints Lea Kissner As Chief Information Security Officer 🕴

Former Humu, Google, and Twitter security leader adds deep security experience.

📖 Read

via "Dark Reading".
‼ CVE-2023-32068 ‼

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible to exploit well known parameters in XWiki URLs to perform redirection to untrusted site. This vulnerability was partially fixed in the past for XWiki 12.10.7 and 13.3RC1 but there is still the possibility to force specific URLs to skip some checks, e.g. using URLs like `http:example.com` in the parameter would allow the redirect. The issue has now been patched against all patterns that are known for performing redirects. This issue has been patched in XWiki 14.10.4 and 15.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

📖 Read

via "National Vulnerability Database".