‼ CVE-2023-25440 ‼
📖 Read
via "National Vulnerability Database".
Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27923 ‼
📖 Read
via "National Vulnerability Database".
Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27514 ‼
📖 Read
via "National Vulnerability Database".
OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26595 ‼
📖 Read
via "National Vulnerability Database".
Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition.📖 Read
via "National Vulnerability Database".
📢 PyPI attack: Targeting of repository 'shows no sign of stopping' 📢
📖 Read
via "ITPro".
Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats 📖 Read
via "ITPro".
ITPro
PyPI attack: Targeting of repository 'shows no sign of stopping'
Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats
⚠ Phone scamming kingpin gets 13 years for running “iSpoof” service ⚠
📖 Read
via "Naked Security".
Site marketing video promised total anonymity, but that was a lie. 170 arrested already. Potentially 1000s more to follow.📖 Read
via "Naked Security".
Naked Security
Phone scamming kingpin gets 13 years for running “iSpoof” service
Site marketing video promised total anonymity, but that was a lie. 170 arrested already. Potentially 1000s more to follow.
🕴 Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans 🕴
📖 Read
via "Dark Reading".
Shorter certificate lifespans are beneficial, but they require a rethink of how to properly manage them.📖 Read
via "Dark Reading".
Dark Reading
Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans
Shorter certificate lifespans are beneficial, but they require a rethink of how to properly manage them.
‼ CVE-2023-2483 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33338 ‼
📖 Read
via "National Vulnerability Database".
Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31669 ‼
📖 Read
via "National Vulnerability Database".
WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23724 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <=Â 3.9.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23706 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <=Â 7.5.14 versions.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-25707 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <=Â 1.5.12 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25472 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher plugin <=Â 3.8.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25481 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Subscribe button plugin <=Â 1.3.7 versions.📖 Read
via "National Vulnerability Database".
🛠 Stegano 0.11.2 🛠
📖 Read
via "Packet Storm Security".
Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit (LSB) technique. It is possible to use a more advanced LSB method based on integers sets. The sets (Sieve of Eratosthenes, Fermat, Carmichael numbers, etc.) are used to select the pixels used to hide the information.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Stegano 0.11.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking 🕴
📖 Read
via "Dark Reading".
A February 2022 attack, knocked the giant tire maker's North American operations offline for several days.📖 Read
via "Dark Reading".
Dark Reading
Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking
A February 2022 attack knocked the giant tire maker's North American operations offline for several days.
🕴 Microsoft: BEC Attackers Evade 'Impossible Travel' Flags With Residential IP Addresses 🕴
📖 Read
via "Dark Reading".
Threat actors are circumventing geo-location-based security detections, using a combination of cybercrime-as-a-service platforms and the purchasing of local IP addresses.📖 Read
via "Dark Reading".
Dark Reading
Microsoft: BEC Attackers Evade 'Impossible Travel' Flags With Residential IP Addresses
Threat actors are circumventing geo-location-based security detections, using a combination of cybercrime-as-a-service platforms and the purchasing of local IP addresses.
‼ CVE-2023-30440 ‼
📖 Read
via "National Vulnerability Database".
IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption. IBM X-Force ID: 253175.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-33359 ‼
📖 Read
via "National Vulnerability Database".
Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25056 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in SlickRemix Feed Them Social plugin <=Â 3.0.2 versions.📖 Read
via "National Vulnerability Database".