πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2023-43877 β€Ό

Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-35803 β€Ό

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-43321 β€Ό

File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the wget function in the /sbin/cloudadmin.sh component.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40299 β€Ό

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Insurance Companies Have a Lot to Lose in Cyberattacks πŸ•΄

Not only do insurance companies collate sensitive information from their clients, but they also generate their own corporate data to protect.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-26239 β€Ό

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-26236 β€Ό

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-26238 β€Ό

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-26237 β€Ό

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-45159 β€Ό

1E Client installer can perform arbitrary file deletion on protected files.Γ‚ Γ‚ A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. A hotfix is available Q23092 that forcesΓ‚ the 1E Client to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path involving a random GUID.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-4145 β€Ό

A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to inject text into a webpage, enabling the obfuscation of a phishing operation.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Could Cybersecurity Breaches Become Harmless in the Future? πŸ•΄

With these five steps, organizations can develop stronger security practices and make the inevitable breaches inconsequential.

πŸ“– Read

via "Dark Reading".
πŸ›  Wireshark Analyzer 4.0.10 πŸ› 

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.

πŸ“– Read

via "Packet Storm Security".
πŸ›  jSQL Injection 0.94 πŸ› 

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL Injection is also part of the official penetration testing distribution Kali Linux and is included in various other distributions like Pentest Box, Parrot Security OS, ArchStrike and BlackArch Linux. This is the source code release.

πŸ“– Read

via "Packet Storm Security".
πŸ•΄ Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit πŸ•΄

Patch now: The Atlassian security vulnerability appears to be a remotely exploitable privilege-escalation bug that cyberattackers could use to crack collaboration environments wide open.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-44390 β€Ό

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. The vulnerability occurs in configurations where foreign content is allowed, i.e. either `svg` or `math` are in the list of allowed elements. In the case an application sanitizes user input with a vulnerable configuration, an attacker could bypass the sanitization and inject arbitrary HTML, including JavaScript code. Note that in the default configuration the vulnerability is not present. The vulnerability has been fixed in versions 8.0.723 and 8.1.722-beta (preview version).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-3248 β€Ό

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Unkillable? Qakbot Infections Fly On Even After Its High-Profile Raid πŸ•΄

A literal seven-nation (cyber) army wasn't enough to hold back the famous initial access broker (IAB) for long β€” it's been chugging along, spreading ransomware, despite a massive takedown in August.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-40745 β€Ό

LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-4401 β€Ό

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of the Γ’β‚¬ΛœmoreÒ€ℒ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-5423 β€Ό

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-241384.

πŸ“– Read

via "National Vulnerability Database".