🛡 Cybersecurity & Privacy 🛡 - News

23andMe Cyberbreach Exposes DNA Data, Potential Family Ties

The information leaked in the breach involves personally identifiable information as well as genetic ancestry data, potential relatives, and geolocations.

280 views17:37

‼ CVE-2023-44243 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Dylan Blokhuis Instant CSS plugin <=Â 1.2.1 versions.

📖 Read

via "National Vulnerability Database".

222 views18:13

‼ CVE-2023-23370 ‼

An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors.We have already fixed the vulnerability in the following version:QVPN Windows 2.1.0.0518 and later

📖 Read

via "National Vulnerability Database".

242 views18:13

‼ CVE-2023-44807 ‼

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.

📖 Read

via "National Vulnerability Database".

189 views18:13

‼ CVE-2023-23365 ‼

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network.We have already fixed the vulnerability in the following version:Music Station 5.3.22 and later

📖 Read

via "National Vulnerability Database".

180 views18:13

‼ CVE-2023-44233 ‼

Cross-Site Request Forgery (CSRF) vulnerability in FooPlugins Best WordPress Gallery Plugin â€“ FooGallery plugin <=Â 2.2.44 versions.

📖 Read

via "National Vulnerability Database".

165 views18:13

‼ CVE-2023-32971 ‼

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.We have already fixed the vulnerability in the following versions:QTS 5.0.1.2425 build 20230609 and laterQTS 5.1.0.2444 build 20230629 and laterQTS 4.5.4.2467 build 20230718 and laterQuTS hero h5.0.1.2515 build 20230907 and laterQuTS hero h5.1.0.2424 build 20230609 and laterQuTS hero h4.5.4.2476 build 20230728 and laterQuTScloud c5.1.0.2498 and later

📖 Read

via "National Vulnerability Database".

266 views18:13

‼ CVE-2023-32972 ‼

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.We have already fixed the vulnerability in the following versions:QTS 5.0.1.2425 build 20230609 and laterQTS 5.1.0.2444 build 20230629 and laterQTS 4.5.4.2467 build 20230718 and laterQuTS hero h5.0.1.2515 build 20230907 and laterQuTS hero h5.1.0.2424 build 20230609 and laterQuTS hero h4.5.4.2476 build 20230728 and laterQuTScloud c5.1.0.2498 and later

📖 Read

via "National Vulnerability Database".

190 views18:13

‼ CVE-2023-23366 ‼

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network.We have already fixed the vulnerability in the following version:Music Station 5.3.22 and later

📖 Read

via "National Vulnerability Database".

205 views18:13

‼ CVE-2023-39928 ‼

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.

📖 Read

via "National Vulnerability Database".

235 views18:13

‼ CVE-2023-23371 ‼

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors.We have already fixed the vulnerability in the following version:QVPN Windows 2.2.0.0823 and later

📖 Read

via "National Vulnerability Database".

262 views18:13

IPVanish VPN Review: Is it Really as Secure as Claimed?

🦿 IPVanish VPN Review (2023): Features, Pricing, and Security 🦿

Read our comprehensive review of IPVanish VPN. Discover its features, pricing, and more to determine if it meets your online security and privacy needs.

📖 Read

via "Tech Republic".

TechRepublic

Read our comprehensive review of IPVanish VPN. Discover its features, pricing, and more to determine if it meets your online security and privacy needs.

275 views19:17

🕴 Predictive Analysis Can Reduce Risks Associated With Data Breaches 🕴

📖 Read

via "Dark Reading".

Predictive Analysis Can Reduce Risks Associated With Data Breaches

221 views20:07

🕴 SecTor 2023: Full Schedule Programming for Toronto Event 🕴

📖 Read

via "Dark Reading".

SecTor 2023: Full Schedule Programming for Toronto Event

204 views20:07

🕴 Cybersecurity Funding Rises by 21% in Q3 2023, Pinpoint Search Group's Report Indicates 🕴

📖 Read

via "Dark Reading".

Cybersecurity Funding Rises by 21% in Q3 2023, Pinpoint Search Group's Report Indicates

168 views20:07

🕴 RIT Is the First University to Receive Support From the Google Cybersecurity Clinics Fund 🕴

📖 Read

via "Dark Reading".

RIT Is the First University to Receive Support From the Google Cybersecurity Clinics Fund

204 views20:07

‼ CVE-2023-21266 ‼

In killBackgroundProcesses of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

📖 Read

via "National Vulnerability Database".

216 views20:13

‼ CVE-2023-5366 ‼

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.

📖 Read

via "National Vulnerability Database".

201 views20:13

‼ CVE-2023-21291 ‼

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

📖 Read

via "National Vulnerability Database".

180 views20:13

‼ CVE-2023-5214 ‼

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.

📖 Read

via "National Vulnerability Database".

195 views20:13