⚠ Crimeware server used by NetWalker ransomware seized and shut down ⚠
📖 Read
via "Naked Security".
The site was running from 2014 and allegedly raked in more than $20m, which the DOJ is seeking to claw back...📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
📢 Stealthy Kerberoasting attacks surge and lend support to latest ransomware trend 📢
📖 Read
via "ITPro".
Kerberoasting techniques could be emerging as a viable alternative to traditional ransomware attacks, experts have warned 📖 Read
via "ITPro".
ITPro
Stealthy Kerberoasting attacks surge and lend support to latest ransomware trend
Kerberoasting techniques could be emerging as a viable alternative to traditional ransomware attacks, experts have warned
🕴 Following Pushback, Zoom Says It Won't Use Customer Data to Train AI Models 🕴
📖 Read
via "Dark Reading".
Company's experience highlights the tightrope tech organizations walk when integrating AI into their products and services.📖 Read
via "Dark Reading".
Dark Reading
Following Pushback, Zoom Says It Won't Use Customer Data to Train AI Models
Company's experience highlights the tightrope tech organizations walk when integrating AI into their products and services.
‼ CVE-2023-30749 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin <=Â 7.3.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30483 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <=Â 3.3.9.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29097 ‼
📖 Read
via "National Vulnerability Database".
Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <=Â 3.1.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30475 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin <= 5.4.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31041 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30754 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin <= 1.8.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30751 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <=Â 1.0.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30752 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin <=Â 2.0.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30477 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <=Â 1.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28535 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <=Â 2.2.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30489 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <=Â 1.2.16 versions.📖 Read
via "National Vulnerability Database".
🕴 Health Data of 4M Stolen in Cl0p MOVEit Breach of Colorado Department 🕴
📖 Read
via "Dark Reading".
State's Department of Health Care Policy & Financing is the latest to acknowledge an attack by the Russian group's ongoing exploitation of third-party systems.📖 Read
via "Dark Reading".
Dark Reading
Health Data of 4M Stolen in Cl0p MOVEit Breach of Colorado Department
State's Department of Health Care Policy & Financing is the latest to acknowledge an attack by the Russian group's ongoing exploitation of third-party systems.
🛠 jSQL Injection 0.91 🛠
📖 Read
via "Packet Storm Security".
jSQL Injection is a lightweight application used to find database information from a distant server. jSQL Injection is also part of the official penetration testing distribution Kali Linux and is included in various other distributions like Pentest Box, Parrot Security OS, ArchStrike and BlackArch Linux. This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
jSQL Injection 0.91 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2023-40359 ‼
📖 Read
via "National Vulnerability Database".
xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28768 ‼
📖 Read
via "National Vulnerability Database".
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33013 ‼
📖 Read
via "National Vulnerability Database".
A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40354 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08.8, and 23.02.3.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4322 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.📖 Read
via "National Vulnerability Database".