‼ CVE-2023-36663 ‼
📖 Read
via "National Vulnerability Database".
it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by authenticated users) via the sort parameter of the API interface.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36660 ‼
📖 Read
via "National Vulnerability Database".
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36664 ‼
📖 Read
via "National Vulnerability Database".
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).📖 Read
via "National Vulnerability Database".
🕴 How Active Directory Bridging Extends Security Automation to Hybrid IT Environments 🕴
📖 Read
via "Dark Reading".
AD bridging extends the reach of your AD domain to non-Windows systems, providing centralized security, single sign-on, and compliance.📖 Read
via "Dark Reading".
Dark Reading
How Active Directory Bridging Extends Security Automation to Hybrid IT Environments
AD bridging extends the reach of your AD domain to non-Windows systems, providing centralized security, single sign-on, and compliance.
🤔1
‼ CVE-2023-36675 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-29424 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Plainware ShiftController Employee Shift Scheduling plugin <=Â 4.9.23 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28988 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin <=Â 2.1.48 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29430 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof plugin <=Â 1.0.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3398 ‼
📖 Read
via "National Vulnerability Database".
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.📖 Read
via "National Vulnerability Database".
🕴 3 Steps to Successfully & Ethically Navigate a Data Breach 🕴
📖 Read
via "Dark Reading".
In this day of "not if, but when" for breaches, transparency and full disclosure are important to salvage a company's reputation and keep public trust.📖 Read
via "Dark Reading".
Dark Reading
3 Steps to Successfully & Ethically Navigate a Data Breach
In this day of "not if, but when" for breaches, transparency and full disclosure are important to salvage a company's reputation and keep public trust.
‼ CVE-2023-29438 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Martin SimpleModal Contact Form (SMCF) plugin <=Â 1.2.9 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36631 ‼
📖 Read
via "National Vulnerability Database".
** DISPUTED ** Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."📖 Read
via "National Vulnerability Database".
⚠ Aussie PM says, “Shut down your phone every 24 hours for 5 mins” – but that’s not enough on its own ⚠
📖 Read
via "Naked Security".
Don't treat rebooting your phone once a day as a cybersecurity talisman... here are 8 additional tips for better mobile phone security.📖 Read
via "Naked Security".
⚠ UK hacker busted in Spain gets 5 years over Twitter hack and more ⚠
📖 Read
via "Naked Security".
Not just that infamous Twitter hack, but SIM-swapping, stalking and swatting too...📖 Read
via "Naked Security".
Naked Security
UK hacker busted in Spain gets 5 years over Twitter hack and more
Not just that infamous Twitter hack, but SIM-swapping, stalking and swatting too…
🕴 Trojanized Super Mario Installer Goes After Gamer Data 🕴
📖 Read
via "Dark Reading".
A legitimate installer for the popular Nintendo game infects Windows machines with various malware, including a cryptominer and an infostealer, again showcasing the importance of remote worker security hygiene.📖 Read
via "Dark Reading".
Dark Reading
Trojanized Super Mario Installer Goes After Gamer Data
A legitimate installer for the popular Nintendo game infects Windows machines with various malware, including a cryptominer and an infostealer, again showcasing the importance of remote worker security hygiene.
‼ CVE-2023-36301 ‼
📖 Read
via "National Vulnerability Database".
Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25306 ‼
📖 Read
via "National Vulnerability Database".
MultiMC Launcher <= 0.6.16 is vulnerable to Directory Traversal.📖 Read
via "National Vulnerability Database".
🕴 How Infrastructure as Code Can Help Minimize Human Error 🕴
📖 Read
via "Dark Reading".
Infrastructure as code lets organizations manage cloud infrastructure with the same versioning, testing, and automation processes they use for application code.📖 Read
via "Dark Reading".
Dark Reading
How Infrastructure as Code Can Help Minimize Human Error
Infrastructure as code lets organizations manage cloud infrastructure with the same versioning, testing, and automation processes they use for application code.
🕴 Remediation Ballet Is a Pas de Deux of Patch and Performance 🕴
📖 Read
via "Dark Reading".
AI-generated code promises quicker fixes for vulnerabilities, but ultimately developers and security teams must balance competing interests.📖 Read
via "Dark Reading".
Dark Reading
Remediation Ballet Is a Pas de Deux of Patch and Performance
AI-generated code promises quicker fixes for vulnerabilities, but ultimately developers and security teams must balance competing interests.
🕴 Remediation Ballet Is a Pas de Deux of Patch and Performance 🕴
📖 Read
via "Dark Reading".
AI-generated code promises quicker fixes for vulnerabilities, but ultimately developers and security teams must balance competing interests.📖 Read
via "Dark Reading".
Dark Reading
Remediation Ballet Is a Pas de Deux of Patch and Performance
AI-generated code promises quicker fixes for vulnerabilities, but ultimately developers and security teams must balance competing interests.
‼ CVE-2023-28485 ‼
📖 Read
via "National Vulnerability Database".
A stored cross-site scripting (Stored XSS) vulnerability in file preview in WeKan before 6.75 allows remote authenticated users to inject arbitrary web script or HTML via names of file attachments. Any user can obtain the privilege to rename within their own board (where they have BoardAdmin access), and renameAttachment does not block XSS payloads.📖 Read
via "National Vulnerability Database".
❤1