πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 5 Best Encryption Key Management Software for 2023 🦿

What is the best encryption key management software for your business? Use our guide to compare the features of our top picks.

πŸ“– Read

via "Tech Republic".
β€Ό CVE-2023-36313 β€Ό

PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests" aside from "request_feed".

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36309 β€Ό

There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36311 β€Ό

There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36310 β€Ό

There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36314 β€Ό

There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.php in PHPJabbers Callback Widget v1.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36315 β€Ό

There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-39957 β€Ό

Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allowed malicious third party apps to trick the Talk Android app into writing files outside of its intended cache directory. Nextcloud Talk Android version 17.0.0 has a patch for this issue. No known workarounds are available.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-36312 β€Ό

There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40216 β€Ό

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-47636 β€Ό

A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file (OutSystems Modeling Language), the application will load the following DLLs from the same directory av_libGLESv2.dll, libcef.DLL, user32.dll, and d3d10warp.dll. Using a crafted DLL, it is possible to execute arbitrary code in the context of the current logged in user.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-4128 β€Ό

A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ The Hard Realities of Setting AI Risk Policy πŸ•΄

Time to get real about what it takes to set and enforce cybersecurity and resilience standards for AI risk management in the enterprise.

πŸ“– Read

via "Dark Reading".
πŸ•΄ EvilProxy Cyberattack Flood Targets Execs via Microsoft 365 πŸ•΄

A campaign sent 120,000 phishing emails in three months, circumventing MFA to compromise cloud accounts of high-level executives at global organizations

πŸ“– Read

via "Dark Reading".
πŸ”₯1
🦿 Black Hat 2023 Keynote: Navigating Generative AI in Today’s Cybersecurity Landscape 🦿

Discover the challenges that AI will bring to the cybersecurity industry and the opportunities and future implications of cybersecurity in an AI-dominated world.

πŸ“– Read

via "Tech Republic".
πŸ•΄ Cyber Insurance Experts Make a Case for Coverage, Protection πŸ•΄

At Black Hat "mini summit," providers and customers get clearer about premium costs and coverage β€” and the risk of doing without.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Dell Credentials Bug Opens VMWare Environments to Takeover πŸ•΄

Decoding private keys from even one Dell customer could give attackers control over VMWare environments across all organizations running the same programs.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-38333 β€Ό

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.

πŸ“– Read

via "National Vulnerability Database".