37323 matches found
CVE-2023-35006
IBM Security QRadar EDR 3.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
CVE-2023-33859
IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy. IBM X-Force ID: 257697...
True Protection or False Promise? The Ultimate ITDR Shortlisting Guide
It's the age of identity security. The explosion of driven ransomware attacks has made CISOs and security teams realize that identity protection lags 20 years behind their endpoints and networks. This realization is mainly due to the transformation of lateral movement from fine art, found in APT...
CVE-2024-39488 arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of BUGENTRY When CONFIGDEBUGBUGVERBOSE=n, we fail to add necessary padding bytes to bugtable entries, and as a result the last entry in a bug table will be ignored, potentially leading to a...
Polyfill.io Supply Chain Attack: Malicious JavaScript Injection Puts Over 100k Websites At Risk
Polyfill.io helps web developers achieve cross-browser compatibility by automatically managing necessary polyfills. By adding a script tag to their HTML, developers can ensure that features like JavaScript functions, HTML5 elements, and various APIs work across different browsers. Originally...
SUSE: Security Advisory (SUSE-SU-2024:2371-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dell DRAC / iDRAC Detection Consolidation
Consolidation of Dell Remote Access Controller DRAC / Integrated Remote Access Controller iDRAC detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Exploit for Improper Privilege Management in Progress Whatsup_Gold
CVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escala...
Developing and prioritizing a detection engineering backlog based on MITRE ATT&CK
Detection is a traditional type of cybersecurity control, along with blocking, adjustment, administrative and other controls. Whereas before 2015 teams asked themselves what it was that they were supposed to detect, as MITRE ATT&CK evolved, SOCs were presented with practically unlimited space for...
New Golang Botnet “Zergeca” Discovered, Delivers Brutal DDoS Attacks
New Golang botnet "Zergeca" evades detection and launches DDoS attacks. Ensure your IoT devices are fully patched against…...
Siemens SIMATIC 安全漏洞
SIMATIC Energy Manager provides users with a scalable, non-industry-specific energy data management system.SIMATIC IPC DiagBase diagnostic software provides early identification of any potential faults on SIMATIC industrial controllers and helps to avoid or reduce system downtime.SIMATIC IPC...
Why You Need Network Detection & Response Now
Cybersecurity teams are well-equipped to handle threats to technology assets that they manage. But with unmanaged devices providing ideal spots for attackers to lurk unseen, network detection and response capabilities have become vitally important...
Network detection & response: the SOC stress reliever
Cybersecurity teams are well-equipped to handle threats to technology assets that they manage. But with unmanaged devices providing ideal spots for attackers to lurk unseen, network detection and response capabilities have become vitally important...
Rapid7 completes IRAP PROTECTED assessment for Insight Platform solutions
Exciting news from Australia! Rapid7 has successfully completed an Information Security Registered Assessors Program IRAP assessment to PROTECTED Level for several of our Insight Platform solutions. What is IRAP? An IRAP assessment is an independent assessment of the implementation,...
CVE-2024-34603
creationtimestamp| type| source ---|---|--- 2024-07-08 09:53:56+00:00| seen| https://t.me/cvedetector/172...
Ubuntu: Security Advisory (USN-6870-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Path Traversal in Splunk
CVE-2024-36991: Path traversal that affects Splunk Enterprise...
Exploit for Code Injection in Geoserver
CVE-2024-36401: GeoServer Unauthenticated Remote Code Executio...
