βΌ CVE-2023-0972 βΌ
π Read
via "National Vulnerability Database".
Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.π Read
via "National Vulnerability Database".
βΌ CVE-2023-24261 βΌ
π Read
via "National Vulnerability Database".
A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request.π Read
via "National Vulnerability Database".
βΌ CVE-2023-3110 βΌ
π Read
via "National Vulnerability Database".
Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.π Read
via "National Vulnerability Database".
βΌ CVE-2023-0970 βΌ
π Read
via "National Vulnerability Database".
Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.π Read
via "National Vulnerability Database".
βΌ CVE-2023-0971 βΌ
π Read
via "National Vulnerability Database".
A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.π Read
via "National Vulnerability Database".
βΌ CVE-2023-25435 βΌ
π Read
via "National Vulnerability Database".
libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33591 βΌ
π Read
via "National Vulnerability Database".
User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-result.php.π Read
via "National Vulnerability Database".
βΌ CVE-2023-0969 βΌ
π Read
via "National Vulnerability Database".
A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33289 βΌ
π Read
via "National Vulnerability Database".
The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs.π Read
via "National Vulnerability Database".
β Beware bad passwords as attackers co-opt Linux servers into cybercrime β
π Read
via "Naked Security".
Did you prevent password-only logins on your SSH servers? On ALL of them? Are you sure about that?π Read
via "Naked Security".
Sophos News
Naked Security β Sophos News
β€1π1
β Apple patch fixes zero-day kernel hole reported by Kaspersky β update now! β
π Read
via "Naked Security".
Apple didn't use the words "Triangulation Trojan", but you probably will.π Read
via "Naked Security".
π΄ Ironscales Adds AI Assistant to Suss Out Phishing Attempts π΄
π Read
via "Dark Reading".
The company says its Themis Co-pilot for Outlook helps recipients discern business email compromise attacks, reducing false positives for security staff.π Read
via "Dark Reading".
Dark Reading
Ironscales Adds AI Assistant to Suss Out Phishing Attempts
The company says its Themis Co-pilot for Outlook helps recipients discern business email compromise attacks, reducing false positives for security staff.
βΌ CVE-2023-28956 βΌ
π Read
via "National Vulnerability Database".
IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls. IBM X-Force ID: 251767.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33842 βΌ
π Read
via "National Vulnerability Database".
IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user to decrypt and obtain sensitive information. IBM X-Force ID: 256117.π Read
via "National Vulnerability Database".
β€1
βΌ CVE-2023-28166 βΌ
π Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aakif Kadiwala Tags Cloud Manager plugin <=Γ 1.0.0 versions.π Read
via "National Vulnerability Database".
β€1
βΌ CVE-2023-27413 βΌ
π Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Shazzad Hossain Khan W4 Post List plugin <=Γ 2.4.4 versions.π Read
via "National Vulnerability Database".
βΌ CVE-2023-29708 βΌ
π Read
via "National Vulnerability Database".
An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted payload.π Read
via "National Vulnerability Database".
β€1
π΄ 2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign π΄
π Read
via "Dark Reading".
The zero-day security bugs are being used to deploy the sophisticated but "odd" TriangleDB spying implant on targeted iOS devices.π Read
via "Dark Reading".
Dark Reading
2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign
The zero-day security bugs are being used to deploy the sophisticated but "odd" TriangleDB spying implant on targeted iOS devices.
π΄ Lessons From a Pen Tester: 3 Steps to Stay Safer π΄
π Read
via "Dark Reading".
From hardening Windows systems to adding access control and segmenting the network, there are steps organizations can take to better secure corporate data.π Read
via "Dark Reading".
Dark Reading
Lessons From a Pen Tester: 3 Steps to Stay Safer
From hardening Windows systems to adding access control and segmenting the network, there are steps organizations can take to better secure corporate data.
βΌ CVE-2023-27452 βΌ
π Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wow-Company Button Generator Γ’β¬β easily Button Builder plugin <=Γ 2.3.3 versions.π Read
via "National Vulnerability Database".
βΌ CVE-2023-35093 βΌ
π Read
via "National Vulnerability Database".
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin Γ’β¬β for Online Courses and Education plugin <=Γ 3.0.8 versions allowsΓ any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order likeΓ email, username, and more.π Read
via "National Vulnerability Database".
β€1