‼ CVE-2023-4358 ‼
📖 Read
via "National Vulnerability Database".
Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4359 ‼
📖 Read
via "National Vulnerability Database".
Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the security UI via a crafted HTML page. (Chromium security severity: Medium)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4368 ‼
📖 Read
via "National Vulnerability Database".
Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4362 ‼
📖 Read
via "National Vulnerability Database".
Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4361 ‼
📖 Read
via "National Vulnerability Database".
Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Medium)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4367 ‼
📖 Read
via "National Vulnerability Database".
Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4360 ‼
📖 Read
via "National Vulnerability Database".
Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)📖 Read
via "National Vulnerability Database".
🕴 Patch Now: OpenNMS Bug Steals Data, Triggers Denial of Service 🕴
📖 Read
via "Dark Reading".
Monitoring platform is trusted by Cisco, Savannah River Nuclear Solutions, and others in CISA's critical infrastructure Sectors, say Synopsys researchers.📖 Read
via "Dark Reading".
Dark Reading
Patch Now: OpenNMS Bug Steals Data, Triggers Denial of Service
Monitoring platform is trusted by Cisco, Savannah River Nuclear Solutions, and others in CISA's critical infrastructure Sectors, say Synopsys researchers.
🕴 3 Major Email Security Standards Falling Down on the Job 🕴
📖 Read
via "Dark Reading".
Nearly 90% of malicious emails manage to get past SPF, DKIM, or DMARC, since threat actors are apparently using the same filters as legitimate users.📖 Read
via "Dark Reading".
Dark Reading
3 Major Email Security Standards Prove Too Porous for the Task
Nearly 90% of malicious emails manage to get past SPF, DKIM, or DMARC, since threat actors are apparently using the same filters as legitimate users.
❤1
🕴 Kaspersky Password Manager Adds 2FA One-Time Password Storage and New Browser Support 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Dark Reading
Kaspersky Password Manager Adds 2FA One-Time Password Storage and New Browser Support
WOBURN, Mass., Aug. 15, 2023 /PRNewswire/ -- Kaspersky has announced two important new features for its Kaspersky Password Manager. The first one enables users to safely store unique keys for two-factor authentication (2FA) and to generate one-time passwords.…
‼ CVE-2023-39848 ‼
📖 Read
via "National Vulnerability Database".
DVWA v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at blind\source\high.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39843 ‼
📖 Read
via "National Vulnerability Database".
Missing encryption in the RFID tag of Suleve 5-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-38866 ‼
📖 Read
via "National Vulnerability Database".
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter interface and display_name.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39841 ‼
📖 Read
via "National Vulnerability Database".
Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39842 ‼
📖 Read
via "National Vulnerability Database".
Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-38864 ‼
📖 Read
via "National Vulnerability Database".
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function at bin/webmgnt.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39852 ‼
📖 Read
via "National Vulnerability Database".
Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39851 ‼
📖 Read
via "National Vulnerability Database".
webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39849 ‼
📖 Read
via "National Vulnerability Database".
Pikachu v1.0 was discovered to contain a SQL injection vulnerability via the $username parameter at \inc\function.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20560 ‼
📖 Read
via "National Vulnerability Database".
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzenâ„¢ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service.📖 Read
via "National Vulnerability Database".