‼ CVE-2022-4900 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4217 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5035 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-5846 ‼
📖 Read
via "National Vulnerability Database".
Franklin Fueling System TS-550 versions prior to 1.9.23.8960 are vulnerable to attackers decoding admin credentials, resulting in unauthenticated access to the device.📖 Read
via "National Vulnerability Database".
🦿 Could Australia’s Cybersecurity Strategy Benefit From More Data Science Rigour? 🦿
📖 Read
via "Tech Republic".
The success of Australia’s six-shield cybersecurity strategy could depend on how well the nation manages the vast pools of data that will underpin the identification and mitigation of cyberthreats.📖 Read
via "Tech Republic".
TechRepublic
Could Australia’s Cyber Security Strategy Benefit From More Data Science Rigour?
The success of Australia’s six-shield cyber security strategy could depend on how well the nation manages the vast pools of data that will underpin the identification and mitigation of cyber threats.
🕴 Upgraded Kazuar Backdoor Offers Stealthy Power 🕴
📖 Read
via "Dark Reading".
The obscure Kazuar backdoor used by Russian attack group Turla has resurfaced, and it's more dangerous than ever.📖 Read
via "Dark Reading".
Dark Reading
Upgraded Kazuar Backdoor Offers Stealthy Power
The obscure Kazuar backdoor used by Russian attack group Turla has resurfaced, and it's more dangerous than ever.
‼ CVE-2023-31018 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5924 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability affects unknown code of the file /admin/courses/view_course.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-244324.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31027 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31023 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5923 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-244323.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31020 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31022 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31026 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31019 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31021 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31017 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31016 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.📖 Read
via "National Vulnerability Database".
♟️ Russian Reshipping Service ‘SWAT USA Drop’ Exposed ♟️
📖 Read
via "Krebs on Security".
One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Here’s a closer look at the Russia-based SWAT USA Drop Service, which currently employs more than 1,200 people across the United States who are knowingly or unwittingly involved in reshipping expensive consumer goods purchased with stolen credit cards.📖 Read
via "Krebs on Security".
Krebs on Security
Russian Reshipping Service ‘SWAT USA Drop’ Exposed
One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Here’s a closer look at the Russia-based SWAT USA Drop Service, which currently employs…
🦿 UK AI Safety Summit: Global Powers Make ‘Landmark’ Pledge to AI Safety 🦿
📖 Read
via "Tech Republic".
Global and tech leaders gathered in the U.K. for an influential summit dedicated to AI regulation and safety. Here’s what you need to know about the Bletchley Declaration, testing of new AI models and more.📖 Read
via "Tech Republic".
TechRepublic
UK AI Safety Summit: Global Powers Make ‘Landmark’ Pledge to AI Safety
Global leaders from 28 nations gathered in the U.K. for an influential summit dedicated to AI regulation and safety.
🕴 How Do We Truly Make Security 'Everyone's Responsibility'? 🕴
📖 Read
via "Dark Reading".
When everybody is responsible for a task, sometimes nobody takes ownership. Here are three steps to distribute cybersecurity throughout your organization.📖 Read
via "Dark Reading".
Dark Reading
How Do We Truly Make Security 'Everyone's Responsibility'?
When everybody is responsible for a task, sometimes nobody takes ownership. Here are three steps to distribute cybersecurity throughout your organization.