‼ CVE-2023-40894 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40892 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40904 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31412 ‼
📖 Read
via "National Vulnerability Database".
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40891 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40901 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39834 ‼
📖 Read
via "National Vulnerability Database".
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4418 ‼
📖 Read
via "National Vulnerability Database".
A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40898 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.📖 Read
via "National Vulnerability Database".
🕴 US Space Industry More Prone to Foreign Espionage, US Agencies Warn 🕴
📖 Read
via "Dark Reading".
Foreign intelligence entities have the US space industry in their sights, posing serious threats to US national security, multiple federal agencies say.📖 Read
via "Dark Reading".
Dark Reading
US Space Industry More Prone to Foreign Espionage, US Agencies Warn
Foreign intelligence entities have the US space industry in their sights, posing serious threats to US national security, multiple federal agencies say.
👍1
🕴 Cypago Raises $13M and Unveils its Cyber GRC Automation (CGA) Platform to Simplify GRC Processes 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Dark Reading
Cypago Raises $13M and Unveils its Cyber GRC Automation (CGA) Platform to Simplify GRC Processes
[Tel Aviv, 24th August, 2023] – Cypago announced the release of its Cyber GRC Automation (CGA) platform today, revolutionizing the GRC space by bridging the gap between management, security, and operations teams. This announcement follows the company’s $13M…
🦿 Major US Energy Company Hit by QR Code Phishing Campaign 🦿
📖 Read
via "Tech Republic".
This QR code phishing campaign is targeting multiple industries and using legitimate services such as Microsoft Bing to increase its efficiency and bypass security.📖 Read
via "Tech Republic".
TechRepublic
Major US Energy Company Hit by QR Code Phishing Campaign
Learn more about the QR code phishing campaign targeting several industries, and how to stay safe from these types of threats.
‼ CVE-2023-39801 ‼
📖 Read
via "National Vulnerability Database".
A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature.📖 Read
via "National Vulnerability Database".
🕴 Cerby Announces $17M in Series A Funding to Secure Nonstandard Applications 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Dark Reading
Cerby Announces $17M in Series A Funding to Secure Nonstandard Applications
ALAMEDA, Calif., Aug. 22, 2023 /PRNewswire/ -- Cerby, the comprehensive access management platform for nonstandard applications, today announced that the company has raised $17 million in Series A funding. Two Sigma Ventures led the round with significant…
‼ CVE-2023-32078 ‼
📖 Read
via "National Vulnerability Database".
Netmaker makes networks with WireGuard. An Insecure Direct Object Reference (IDOR) vulnerability was found in versions prior to 0.17.1 and 0.18.6 in the user update function. By specifying another user's username, it was possible to update the other user's password. The issue is patched in 0.17.1 and fixed in 0.18.6. If Users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users. If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later. As a workaround, someone using version 0.17.1 can pull the latest docker image of the backend and restart the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37469 ‼
📖 Read
via "National Vulnerability Database".
CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39521 ‼
📖 Read
via "National Vulnerability Database".
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, content displayed in the "card fields" (visible in the kanban and PV2 apps) is not properly escaped. An agile dashboard administrator deleting a kanban with a malicious label can be forced to execute uncontrolled code. Tuleap Community Edition 14.11.99.28, Tuleap Enterprise Edition 14.10-6, and Tuleap Enterprise Edition 14.11-3 contain a fix for this issue.📖 Read
via "National Vulnerability Database".