ATENTION‼ New - CVE-2015-9400
📖 Read
via "National Vulnerability Database".
The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9399
📖 Read
via "National Vulnerability Database".
The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9398
📖 Read
via "National Vulnerability Database".
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9397
📖 Read
via "National Vulnerability Database".
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9396
📖 Read
via "National Vulnerability Database".
The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9395
📖 Read
via "National Vulnerability Database".
The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9394
📖 Read
via "National Vulnerability Database".
The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9393
📖 Read
via "National Vulnerability Database".
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9392
📖 Read
via "National Vulnerability Database".
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.📖 Read
via "National Vulnerability Database".
🔏 Friday Five: 9/20 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A popular password manager fixes a bug, a 20 million person breach, and more - catch up on the week's infosec and privacy news with this week's Friday Five!📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 9/20 Edition
A popular password manager fixes a bug, a 20 million person breach, and more - catch up on the week's infosec and privacy news with this week's Friday Five!
🕴 Ransomware Strikes 49 School Districts & Colleges in 2019 🕴
📖 Read
via "Dark Reading: ".
The education sector has seen 10 new victims in the past nine days alone, underscoring a consistent trend throughout 2019.📖 Read
via "Dark Reading: ".
Darkreading
Ransomware Strikes 49 School Districts & Colleges in 2019
The education sector has seen 10 new victims in the past nine days alone, underscoring a consistent trend throughout 2019.
❌ Facebook Removed Tens of Thousands of Apps Post-Cambridge Analytica ❌
📖 Read
via "Threatpost".
Facebook said it has suspended and banned tens of thousands of apps on its platform after its investigation, launched after Cambridge Analytica, into how they collect and use data.📖 Read
via "Threatpost".
Threat Post
Facebook Removed Tens of Thousands of Apps Post-Cambridge Analytica
Facebook said it has suspended and banned tens of thousands of apps on its platform after its investigation, launched after Cambridge Analytica, into how they collect and use data.
🔐 How to avoid the dreaded Video4Linux flaw in Android 🔐
📖 Read
via "Security on TechRepublic".
With Google dragging its feet on the fix for Video4Linux, you might consider revoking camera permissions for certain apps.📖 Read
via "Security on TechRepublic".
TechRepublic
How to avoid the dreaded Video4Linux flaw in Android
With Google dragging its feet on the fix for Video4Linux, you might consider revoking camera permissions for certain apps.
🕴 HP Purchases Security Startup Bromium 🕴
📖 Read
via "Dark Reading: ".
The purchase will bring new isolation and threat intelligence capabilities to the HP portfolio.📖 Read
via "Dark Reading: ".
Dark Reading
HP Purchases Security Startup Bromium
The purchase will bring new isolation and threat intelligence capabilities to the HP portfolio.
🛠 Web-Based Firewall Logging Tool 1.1.2 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Webfwlog is a Web-based firewall log reporting and analysis tool. It allows users to design reports to use on logged firewall data in whatever configuration they desire. Included are sample reports as a starting point. Reports can be sorted with a single click, or "drilled-down" all the way to the packet level, and saved for later use. Supported log formats are netfilter, ipfilter, ipfw, ipchains, and Windows XP. Netfilter support includes ulogd MySQL or PostgreSQL database logs using the iptables ULOG target.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Web-Based Firewall Logging Tool 1.1.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Wireshark Analyzer 3.0.5 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Wireshark Analyzer 3.0.5 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
ATENTION‼ New - CVE-2015-9406
📖 Read
via "National Vulnerability Database".
Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-10397
📖 Read
via "National Vulnerability Database".
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-10396
📖 Read
via "National Vulnerability Database".
The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php.📖 Read
via "National Vulnerability Database".
🕴 7 Ways VPNs Can Turn from Ally to Threat 🕴
📖 Read
via "Dark Reading: ".
VPNs are critical pieces of the security infrastructure, but they can be vulnerable, hackable, and weaponized against you. Here are seven things to be aware of before you ignore your VPN.📖 Read
via "Dark Reading: ".
Dark Reading
7 Ways VPNs Can Turn from Ally to Threat
VPNs are critical pieces of the security infrastructure, but they can be vulnerable, hackable, and weaponized against you. Here are seven things to be aware of before you ignore your VPN.
⚠ Monday review – the hot 22 stories of the week ⚠
📖 Read
via "Naked Security".
From the Simjacker phone hack to IBM's cloud-based quantum computer - and everything in between. It's the weekly security roundup.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 22 stories of the week
From the Simjacker phone hack to IBM’s cloud-based quantum computer – and everything in between. It’s the weekly security roundup.