‼ CVE-2023-2859 ‼
📖 Read
via "National Vulnerability Database".
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0357 ‼
📖 Read
via "National Vulnerability Database".
Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.This issue affects:Bitdefender Total Securityversions prior to 26.0.10.45.Bitdefender Internet Securityversions prior to 26.0.10.45.Bitdefender Antivirus Plusversions prior to 26.0.10.45.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1424 ‼
📖 Read
via "National Vulnerability Database".
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.📖 Read
via "National Vulnerability Database".
🕴 5 Questions to Ask When Evaluating a New Cybersecurity Technology 🕴
📖 Read
via "Dark Reading".
Any new cybersecurity technology should be not just a neutral addition to a security stack but a benefit to the other technologies or people managing them.📖 Read
via "Dark Reading".
Dark Reading
5 Questions to Ask When Evaluating a New Cybersecurity Technology
Any new cybersecurity technology should be not just a neutral addition to a security stack but a benefit to the other technologies or people managing them.
‼ CVE-2023-2750 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cityboss E-municipality allows SQL Injection.This issue affects E-municipality: before 6.05.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33009 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33937 ‼
📖 Read
via "National Vulnerability Database".
Stored cross-site scripting (XSS) vulnerability in Form widget configuration in Liferay Portal 7.1.0 through 7.3.0, and Liferay DXP 7.1 before fix pack 18, and 7.2 before fix pack 5 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a form's `name` field.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33010 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2065 ‼
📖 Read
via "National Vulnerability Database".
Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28 .📖 Read
via "National Vulnerability Database".
🕴 Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks 🕴
📖 Read
via "Dark Reading".
Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.📖 Read
via "Dark Reading".
Dark Reading
Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks
Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.
🕴 How Universities Can Bridge Cybersecurity's Gender Gap 🕴
📖 Read
via "Dark Reading".
It's time to invest in initiatives that engage young women in cybersecurity early and often.📖 Read
via "Dark Reading".
Dark Reading
How Universities Can Bridge Cybersecurity's Gender Gap
It's time to invest in initiatives that engage young women in cybersecurity early and often.
⚠ PyPI open-source code repository deals with manic malware maelstrom ⚠
📖 Read
via "Naked Security".
Controlled outage used to keep malware marauders from gumming up the works. Learn what you can do to help in future...📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps 🕴
📖 Read
via "Dark Reading".
A cybersecurity vulnerability found in an implementation of the social login functionality opens the door to account takeovers and more.📖 Read
via "Dark Reading".
Dark Reading
OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps
A cybersecurity vulnerability found in an implementation of the social login functionality opens the door to account takeovers and more.
⚠ Ransomware tales: The MitM attack that really had a Man in the Middle ⚠
📖 Read
via "Naked Security".
Another traitorous insider, busted by system logs that gave his game away.📖 Read
via "Naked Security".
Naked Security
Ransomware tales: The MitM attack that really had a Man in the Middle
Another traitorous sysadmin story, this one busted by system logs that gave his game away…
‼ CVE-2022-46816 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <=Â 1.1.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47447 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <=Â 3.3.8 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47446 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin <= 3.98.7 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47180 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Kopa Theme Kopa Framework plugin <=Â 1.3.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46794 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in weightbasedshipping.Com WooCommerce Weight Based Shipping plugin <=Â 5.4.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25028 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in chuyencode CC Custom Taxonomy plugin <=Â 1.0.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1174 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.📖 Read
via "National Vulnerability Database".