‼ CVE-2023-28413 ‼
📖 Read
via "National Vulnerability Database".
Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attacker to obtain sensitive information, alter the website, or cause a denial-of-service (DoS) condition.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31740 ‼
📖 Read
via "National Vulnerability Database".
There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WL_atten_bb, WL_atten_radio, and WL_atten_ctl in the apply.cgi interface, thereby gaining shell privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28394 ‼
📖 Read
via "National Vulnerability Database".
Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25440 ‼
📖 Read
via "National Vulnerability Database".
Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27923 ‼
📖 Read
via "National Vulnerability Database".
Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27514 ‼
📖 Read
via "National Vulnerability Database".
OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26595 ‼
📖 Read
via "National Vulnerability Database".
Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition.📖 Read
via "National Vulnerability Database".
📢 PyPI attack: Targeting of repository 'shows no sign of stopping' 📢
📖 Read
via "ITPro".
Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats 📖 Read
via "ITPro".
ITPro
PyPI attack: Targeting of repository 'shows no sign of stopping'
Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats
⚠ Phone scamming kingpin gets 13 years for running “iSpoof” service ⚠
📖 Read
via "Naked Security".
Site marketing video promised total anonymity, but that was a lie. 170 arrested already. Potentially 1000s more to follow.📖 Read
via "Naked Security".
Naked Security
Phone scamming kingpin gets 13 years for running “iSpoof” service
Site marketing video promised total anonymity, but that was a lie. 170 arrested already. Potentially 1000s more to follow.
🕴 Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans 🕴
📖 Read
via "Dark Reading".
Shorter certificate lifespans are beneficial, but they require a rethink of how to properly manage them.📖 Read
via "Dark Reading".
Dark Reading
Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans
Shorter certificate lifespans are beneficial, but they require a rethink of how to properly manage them.
‼ CVE-2023-2483 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33338 ‼
📖 Read
via "National Vulnerability Database".
Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31669 ‼
📖 Read
via "National Vulnerability Database".
WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23724 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <=Â 3.9.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23706 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <=Â 7.5.14 versions.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-25707 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <=Â 1.5.12 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25472 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher plugin <=Â 3.8.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25481 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Subscribe button plugin <=Â 1.3.7 versions.📖 Read
via "National Vulnerability Database".
🛠 Stegano 0.11.2 🛠
📖 Read
via "Packet Storm Security".
Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit (LSB) technique. It is possible to use a more advanced LSB method based on integers sets. The sets (Sieve of Eratosthenes, Fermat, Carmichael numbers, etc.) are used to select the pixels used to hide the information.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Stegano 0.11.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking 🕴
📖 Read
via "Dark Reading".
A February 2022 attack, knocked the giant tire maker's North American operations offline for several days.📖 Read
via "Dark Reading".
Dark Reading
Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking
A February 2022 attack knocked the giant tire maker's North American operations offline for several days.
🕴 Microsoft: BEC Attackers Evade 'Impossible Travel' Flags With Residential IP Addresses 🕴
📖 Read
via "Dark Reading".
Threat actors are circumventing geo-location-based security detections, using a combination of cybercrime-as-a-service platforms and the purchasing of local IP addresses.📖 Read
via "Dark Reading".
Dark Reading
Microsoft: BEC Attackers Evade 'Impossible Travel' Flags With Residential IP Addresses
Threat actors are circumventing geo-location-based security detections, using a combination of cybercrime-as-a-service platforms and the purchasing of local IP addresses.