‼ CVE-2023-35844 ‼
📖 Read
via "National Vulnerability Database".
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34642 ‼
📖 Read
via "National Vulnerability Database".
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32201 ‼
📖 Read
via "National Vulnerability Database".
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34603 ‼
📖 Read
via "National Vulnerability Database".
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32542 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
📢 Anonymous Sudan: Who are the hackers behind Microsoft’s cloud outages? 📢
📖 Read
via "ITPro".
The highly aggressive ‘hacktivist’ group is thought to have links to the pro-Russian Killnet hacker collective 📖 Read
via "ITPro".
Cloud Pro
Anonymous Sudan: Who are the hackers behind Microsoft’s cloud outages?
The highly aggressive ‘hacktivist’ group is thought to have links to the pro-Russian Killnet hacker collective
‼ CVE-2023-2805 ‼
📖 Read
via "National Vulnerability Database".
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the set_add_agent_leaves AJAX function before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25733 ‼
📖 Read
via "National Vulnerability Database".
The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25747 ‼
📖 Read
via "National Vulnerability Database".
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30.*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2899 ‼
📖 Read
via "National Vulnerability Database".
The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin📖 Read
via "National Vulnerability Database".
🕴 Decoding Identity and Access Management For Organizations and Consumers 🕴
📖 Read
via "Dark Reading".
Workforce IAM and consumer IAM are not interchangeable — they serve different purposes and constituencies.📖 Read
via "Dark Reading".
Dark Reading
Decoding Identity and Access Management for Organizations and Consumers
Workforce IAM and consumer IAM are not interchangeable — they serve different purposes and constituencies.
🕴 US Investors Sniffing Around Blacklisted NSO Group Assets 🕴
📖 Read
via "Dark Reading".
Pressure mounts on the NSO Group's business viability as Khashoggi widow joins group of plaintiffs suing the Israeli firm for Pegasus spyware abuse.📖 Read
via "Dark Reading".
Dark Reading
US Investors Sniffing Around Blacklisted NSO Group Assets
Pressure mounts on the NSO Group's business viability as Khashoggi widow joins group of plaintiffs suing the Israeli firm for Pegasus spyware abuse.
❤1
🕴 Generative AI Has Its Risks, But the Sky Isn't Falling 🕴
📖 Read
via "Dark Reading".
The threat organizations face with GenAI is not new, but it could speed how quickly private data reaches a wider audience.📖 Read
via "Dark Reading".
Dark Reading
Generative AI Has Its Risks, but the Sky Isn't Falling
The threat organizations face with GenAI is not new, but it could speed how quickly private data reaches a wider audience.
🕴 Name That Toon: Time to Spare? 🕴
📖 Read
via "Dark Reading".
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.📖 Read
via "Dark Reading".
Dark Reading
Name That Toon: Time to Spare?
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
‼ CVE-2023-3316 ‼
📖 Read
via "National Vulnerability Database".
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34373 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Project Manager plugin <=Â 3.3.93 versions.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-35772 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alain Gonzalez Google Map Shortcode plugin <=Â 3.1.2 versions.📖 Read
via "National Vulnerability Database".
🕴 Consumer Data: The Risk and Reward for Manufacturing Companies 🕴
📖 Read
via "Dark Reading".
To adequately address privacy, manufacturers need to think differently about data.📖 Read
via "Dark Reading".
Dark Reading
Consumer Data: The Risk and Reward for Manufacturing Companies
To adequately address privacy, manufacturers need to think differently about data.
⚠ Megaupload duo will go to prison at last, but Kim Dotcom fights on… ⚠
📖 Read
via "Naked Security".
One, sadly, has died, and two are heading to prison, but for Kim Dotcom, the saga goes on...📖 Read
via "Naked Security".
Naked Security
Megaupload duo will go to prison at last, but Kim Dotcom fights on…
One, sadly, has died, and two are heading to prison, but for Kim Dotcom, the saga goes on…
‼ CVE-2022-48489 ‼
📖 Read
via "National Vulnerability Database".
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34156 ‼
📖 Read
via "National Vulnerability Database".
Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause services to be denied.📖 Read
via "National Vulnerability Database".