‼️CVE-2023-6485‼️
📖 Read more
Via "National Vulnerability Database"
The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored CrossSite Scripting attacks against high privilege users like admins📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0181‼️
📖 Read more
Via "National Vulnerability Database"
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file adminadminuser.php of the component Admin Panel. The manipulation of the argument FirstnameLastnameUsername leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB249433 was assigned to this vulnerability.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2023-50094‼️
📖 Read more
Via "National Vulnerability Database"
reNgine through 2.0.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an apitoolswafdetector?url string. The commands are executed as root via subprocess.checkoutput.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2023-50096‼️
📖 Read more
Via "National Vulnerability Database"
STMicroelectronics STSAFEA1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeAReceiveBytes buffer overflow in the XCUBESAFEA1 Software Package for STSAFEA sample applications 1.2.0, and thus can affect userwritten code that was derived from a published sample application.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0182‼️
📖 Read more
Via "National Vulnerability Database"
A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin of the component Admin Login. The manipulation of the argument usernamepassword leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB249440.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0183‼️
📖 Read more
Via "National Vulnerability Database"
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. This affects an unknown part of the file adminstudents.php of the component NIA Office. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB249441 was assigned to this vulnerability.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0184‼️
📖 Read more
Via "National Vulnerability Database"
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file admineditteacher.php of the component Add Enginer. The manipulation of the argument FirstnameLastname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB249442 is the identifier assigned to this vulnerability.📖 Read more
Via "National Vulnerability Database"
📔 Black Basta Ransomware Decryptor Published 📔
📖 Read
via "Infosecurity Magazine".
Researchers at SRLabs have revealed a new suite of decryption tools for Black Basta ransomware📖 Read
via "Infosecurity Magazine".
Infosecurity Magazine
Black Basta Ransomware Decryptor Published
Researchers at SRLabs have revealed a new suite of decryption tools for Black Basta ransomware
📔 Teen Found Alive After “Cyber-Kidnapping” Incident 📔
📖 Read
via "Infosecurity Magazine".
A Chinese foreign exchange student has been found after online scammers extorted money from his parents📖 Read
via "Infosecurity Magazine".
Infosecurity Magazine
Teen Found Alive After “Cyber-Kidnapping” Incident
A Chinese foreign exchange student has been found after online scammers extorted money from his parents
👍1
📢 Google and the University of Cambridge deal looks to pioneer responsible AI research 📢
📖 Read
via "ITPro".
Google will collaborate with university researchers on AI for good 📖 Read
via "ITPro".
ITPro
Google and the University of Cambridge deal looks to pioneer responsible AI research
Google will collaborate with university researchers on AI for good
🖋️ The Definitive Enterprise Browser Buyer's Guide 🖋️
📖 Read
via "The Hacker News".
Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is managed and protected. While not long-ago web-borne risks were still addressed by a patchwork of endpoint, network, and cloud solutions, it is now clear that the partial protection these solutions provided is no longer sufficient. Therefore,📖 Read
via "The Hacker News".
❤1
🖋️ Google Settles $5 Billion Privacy Lawsuit Over Tracking Users in 'Incognito Mode' 🖋️
📖 Read
via "The Hacker News".
Google has agreed to settle a lawsuit filed in June 2020 that alleged that the company misled users by tracking their surfing activity who thought that their internet use remained private when using the “incognito” or “private” mode on web browsers.The class-action lawsuit sought at least $5 billion in damages. The settlement terms were not disclosed.The plaintiffs had📖 Read
via "The Hacker News".
📔 Australian Court Service Hacked, Hearing Recordings at Risk 📔
📖 Read
via "Infosecurity Magazine".
Court Services Victoria said the incident may have compromised recordings involving people whose identities are protected 📖 Read
via "Infosecurity Magazine".
Infosecurity Magazine
Australian Court Service Hacked, Hearing Recordings at Risk
Court Services Victoria said the incident may have compromised recordings involving people whose identities are protected
📢 Google settles $5 billion privacy lawsuit ahead of cookie phase-out 📢
📖 Read
via "ITPro".
Google has agreed to settle a $5 billion lawsuit over claims the it covertly tracked millions of users 📖 Read
via "ITPro".
ITPro
Google settles $5 billion privacy lawsuit ahead of cookie phase-out
Google has agreed to settle a $5 billion lawsuit over claims the it covertly tracked millions of users
📢 Generative AI poses a “major risk” to UK national security as report warns over risk of radicalization 📢
📖 Read
via "ITPro".
Terrorism tsar John Hall has called for new laws to mitigate the risks of generative AI 📖 Read
via "ITPro".
ITPro
Generative AI poses a “major risk” to UK national security as report warns over risk of radicalization
Terrorism tsar John Hall has called for new laws to mitigate the risks of generative AI
📢 Hackers use LinkedIn to target UK nuclear waste firm 📢
📖 Read
via "ITPro".
Radioactive Waste Management said attackers have leveraged LinkedIn in a spear phishing campaign 📖 Read
via "ITPro".
ITPro
Hackers use LinkedIn to target UK nuclear waste firm
Radioactive Waste Management said attackers have leveraged LinkedIn in a spear phishing campaign
🕴 10 Years After Yahoo Breach, What's Changed? (Not Much) 🕴
📖 Read
via "Dark Reading".
Yahoo customers suffered the largest data breaches in history by some measures. But a decade on, experts warn, we still haven't learned our lesson.📖 Read
via "Dark Reading".
Dark Reading
10 Years After Yahoo, What’s Changed? (Not Much)
Yahoo customers suffered the largest data breaches in history by some measures. But a decade on, experts warn, we still haven't learned our lesson.
🛠 Stegano 0.11.3 🛠
📖 Read
via "Packet Storm Security".
Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit (LSB) technique. It is possible to use a more advanced LSB method based on integers sets. The sets (Sieve of Eratosthenes, Fermat, Carmichael numbers, etc.) are used to select the pixels used to hide the information.📖 Read
via "Packet Storm Security".
packetstorm.news
Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers
📔 Over $80m in Crypto Stolen in Cyber-Attack on Orbit Chain 📔
📖 Read
via "Infosecurity Magazine".
Orbit Chain said that the stolen cryptocurrency currently remains unmoved📖 Read
via "Infosecurity Magazine".
Infosecurity Magazine
Over $80m in Crypto Stolen in Cyber-Attack on Orbit Chain
Orbit Chain said that the stolen cryptocurrency currently remains unmoved
📢 Russia-linked group could be behind Australian state court cyber attack 📢
📖 Read
via "ITPro".
A ransomware group was able to gain access to a database containing courtroom recordings of trials between November and December 📖 Read
via "ITPro".
ITPro
Russia-linked group could be behind Australian state court cyber attack
A ransomware group was able to gain access to a database containing courtroom recordings of trials between November and December
🕴 Startups Scramble to Build Immediate AI Security 🕴
📖 Read
via "Dark Reading".
AI may be inherently insecure, but only a handful of startups have put forward real visions to mitigate AI's threats and keep data private.📖 Read
via "Dark Reading".
Darkreading
Startups Scramble to Build Immediate AI Security
AI may be inherently insecure, but only a handful of startups have put forward real visions to mitigate AI's threats and keep data private.