‼ CVE-2023-29349 ‼
📖 Read
via "National Vulnerability Database".
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32027 ‼
📖 Read
via "National Vulnerability Database".
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34845 ‼
📖 Read
via "National Vulnerability Database".
Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32026 ‼
📖 Read
via "National Vulnerability Database".
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3291 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2788 ‼
📖 Read
via "National Vulnerability Database".
Mattermost fails to check if an admin user account active after an oauth2 flow is started, allowing an attacker with admin privileges to retain persistent access to Mattermost by obtaining an oauth2 access token while the attacker's account is deactivated.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34154 ‼
📖 Read
via "National Vulnerability Database".
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2786 ‼
📖 Read
via "National Vulnerability Database".
Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.📖 Read
via "National Vulnerability Database".
📢 Latest arrest places LockBit firmly in the crosshairs of international cyber police 📢
📖 Read
via "ITPro".
The threat group could be set for a fate reminiscent of REvil 📖 Read
via "ITPro".
ITPro
Latest arrest places LockBit firmly in the crosshairs of international cyber police
The threat group could be set for a fate reminiscent of REvil
‼ CVE-2023-2785 ‼
📖 Read
via "National Vulnerability Database".
Mattermost fails to properly truncate the postgres error log message of a search query failure allowing an attacker to cause the creation of large log files📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2793 ‼
📖 Read
via "National Vulnerability Database".
Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an attacker to cause a denial-of-service by a linking to a specially crafted webpage in a message.📖 Read
via "National Vulnerability Database".
👏1
🕴 HashiCorp Expands PAM, Secrets Management Capabilities 🕴
📖 Read
via "Dark Reading".
The new privileged access management and secrets management capabilities tackles access issues and secret sprawl across the cloud environment.📖 Read
via "Dark Reading".
Dark Reading
HashiCorp Expands PAM, Secrets Management Capabilities
The new privileged access management and secrets management capabilities tackles access issues and secret sprawl across the cloud environment.
🕴 Cybercrime Doesn't Take a Vacation 🕴
📖 Read
via "Dark Reading".
Organizations need to prepare for security threats as summer holidays approach.📖 Read
via "Dark Reading".
Dark Reading
Cybercrime Doesn't Take a Vacation
Organizations need to prepare for security threats as summer holidays approach.
‼ CVE-2023-26537 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nicolly WP No External Links plugin <=Â 1.0.2 versions.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-26527 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <=Â 1.4 versions.📖 Read
via "National Vulnerability Database".
❤2
🕴 Attackers Create Synthetic Security Researchers to Steal IP 🕴
📖 Read
via "Dark Reading".
Threat groups created a fake security company, "High Sierra," with faux exploits and fake profiles for security researchers on GitHub and elsewhere, aiming to get targets to install their malware.📖 Read
via "Dark Reading".
Dark Reading
Attackers Create Synthetic Security Researchers to Steal IP
Threat groups created a fake security company, "High Sierra," with faux exploits and fake profiles for security researchers on GitHub and elsewhere, aiming to get targets to install their malware.
‼ CVE-2023-35783 ‼
📖 Read
via "National Vulnerability Database".
The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.📖 Read
via "National Vulnerability Database".
❤1
🕴 Dodgy Microlending Apps Stalk MEA Users, Highlighting Cyber Maturity Gaps 🕴
📖 Read
via "Dark Reading".
Mobile users in the Middle East and Africa often download moneylending apps that ask for excessive permissions — an all too common issue in an area where mobile-only is common and cyber awareness is low.📖 Read
via "Dark Reading".
Dark Reading
Dodgy Microlending Apps Stalk MEA Users, Highlighting Cyber Maturity Gaps
Mobile users in the Middle East and Africa often download moneylending apps that ask for excessive permissions — an all too common issue in an area where mobile-only is the norm and cyber awareness is low.
🛠 Suricata IDPE 6.0.13 🛠
📖 Read
via "Packet Storm Security".
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Suricata IDPE 6.0.13 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2023-30453 ‼
📖 Read
via "National Vulnerability Database".
The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34733 ‼
📖 Read
via "National Vulnerability Database".
A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service (DoS) via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature.📖 Read
via "National Vulnerability Database".