πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 Arc Browser Review (2023): Pricing, Features, Alternatives and More 🦿

Learn about Arc's features, pros and cons, and what makes the web browser unique. Arc is available only for Mac and iPhone users.

πŸ“– Read

via "Tech Republic".
πŸ•΄ Cult of the Dead Cow Hacktivists Give Life to 'Privacy-First' App Framework πŸ•΄

The well-known collective is taking on targeted advertising with the Veilid framework and says it wants to make the Internet accessible to everyone who fears being monetized.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Hactivist Group 'Mysterious Team Bangladesh' Goes on DDoS Rampage πŸ•΄

The emerging threat has carried out 750 DDoS attacks and 78 website defacements in just one year to support its religious and political motives.

πŸ“– Read

via "Dark Reading".
⚠ S3 Ep146: Tell us about that breach! (If you want to.) ⚠

Serious security stories explained clearly in plain English - listen now. (Full transcript available.)

πŸ“– Read

via "Naked Security".
🦿 Companies Should Implement ROI-Driven Cybersecurity Budgets, Expert Says 🦿

Discover the new models used to assign security budgets that succeed where traditional and outdated processes fail.

πŸ“– Read

via "Tech Republic".
β€Ό CVE-2023-4145 β€Ό

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-33363 β€Ό

An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36213 β€Ό

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-33365 β€Ό

A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web server.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-33366 β€Ό

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-25524 β€Ό

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a userÒ€ℒs access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit of this vulnerability may lead to information disclosure.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-38947 β€Ό

An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-33364 β€Ό

An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server.

πŸ“– Read

via "National Vulnerability Database".
πŸ‘1
β€Ό CVE-2023-38948 β€Ό

An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-0956 β€Ό

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-39075 β€Ό

Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-38942 β€Ό

Dango-Translator v4.5.5 was discovered to contain a remote command execution (RCE) vulnerability via the component app/config/cloud_config.json.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36217 β€Ό

Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-32764 β€Ό

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-35081 β€Ό

A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-42986 β€Ό

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-39122. Reason: This candidate is a reservation duplicate of CVE-2023-39122. Notes: All CVE users should reference CVE-2023-39122 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

πŸ“– Read

via "National Vulnerability Database".