CVE-2022-48183

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access...

CVE-2022-48183

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access...

CVE-2022-48183

ThinkPad ThinkPad T14s Gen 3 and X13 Gen3 BIOS have a tamper-detection mechanism flaw. Root cause: an error in BIOS tamper detection may prevent triggering under specific conditions, potentially allowing unauthorized access. Some connected sources even suggest the issue could enable arbitrary cod...

CVE-2022-48182

CVE-2022-48182 affects ThinkPad T14s Gen 3 and ThinkPad X13 Gen 3, where the BIOS tamper-detection mechanism may fail to trigger under certain conditions, potentially enabling unauthorized access. The connected PT-2023-15605 entry notes affected models and states there is no information about a f...

CVE-2022-48182

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access...

CVE-2022-3728

CVE-2022-3728 affects ThinkPad T14s Gen 3 and X13 Gen3. The vulnerability describes a condition where the BIOS tamper-detection mechanism may fail to trigger under specific circumstances, potentially allowing unauthorized access. The provided connected documents confirm the affected models and th...

CVE-2022-3728

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access...

CVE-2023-25822

creationtimestamp| type| source ---|---|--- 2023-10-09 18:15:57+00:00| seen| https://t.me/cibsecurity/71843...

How to Protect Against Data Lake Hacking

Data lakes, or centralized repositories for large-scale data, are a popular solution for data storage, and there are good reasons for that. Data lakes are flexible and cost-effective, as they allow many object formats and multiple query engines, and there is no need to manage or pay for resources...

CVE-2023-42455

Summary: CVE-2023-42455 affects Wazuh 4.4.0 and 4.4.1, where a logged-in dashboard user can obtain the Wazuh API administrator key via browser developer tools, potentially granting API administrator access regardless of dashboard-role privileges. The issue is resolved in version 4.4.2. Notes from...

CVE-2023-42455 Wazuh vulnerable to user privilege escalation

Wazuh is a security detection, visibility, and compliance open source project. In versions 4.4.0 and 4.4.1, it is possible to get the Wazuh API administrator key used by the Dashboard using the browser development tools. This allows a logged user to the dashboard to become administrator of the AP...

WEBIGniter v28.7.23 File Upload - Remote Code Execution

Title: WEBIGniter v28.7.23 File Upload - Remote Code Execution Author: nu11secur1ty Date: 09/04/2023 Vendor: https://webigniter.net/ Software: https://webigniter.net/demo Reference: https://portswigger.net/web-security/file-upload Description: The media function suffers from file upload...

The vulnerability of the Protection Agent component in Watchguard Endpoint Protection’s Detection and Response (EPDR) and Panda Adaptive Defense 360 (Panda AD360) allows attackers to enhance their privileges.

The vulnerability of the Protection Agent component in Watchguard Endpoint Protection, Detection and Response EPDR, and Panda Adaptive Defense 360 Panda AD360 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by sending...

PT-2023-13523 · Lenovo · Thinkpad X13 Gen3 +1

Name of the Vulnerable Software and Affected Versions: ThinkPad T14s Gen 3 affected versions not specified ThinkPad X13 Gen3 affected versions not specified Description: A vulnerability was reported that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances,...

Rhysida Ransomware

Rhysida Ransomware By Alexandre Mundo, Max Kersten, and Leandro Velasco · October 9, 2023 New ransomware victims are made every day by ransom gangs with a variety of ransomware malware families, one of which is the Rhysida ransomware family. Within this blog, an anonymised version of an attack by...

What’s New in Rapid7 Detection & Response: Q3 2023 in Review

This post takes a look at some of the investments we've made throughout Q3 2023 to our Detection and Response offerings to provide advanced DFIR capabilities with Velociraptor, more flexibility with custom detection rules, enhancements to our dashboard and log search features, and more. Stop...

A Cybersecurity Risk Assessment Guide for Leaders

Cybersecurity risk assessment provides the continuous asset detection, analysis, prioritization, and risk scoring needed to keep pace with a continuously growing digital attack surface...

WatchGuard EPDR Security Vulnerability

WatchGuard EPDR is an application from WatchGuard USA, Inc. prevents, detects and responds to any type of known and unknown malware as well as fileless and malware-free attacks. A security vulnerability exists in WatchGuard EPDR version 8.0.21.0002, which stems from a weak implementation of...

PT-2023-20554 · Watchguard · Watchguard Epdr

Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR version 8.0.21.0002 Description: An issue was discovered in WatchGuard EPDR, where it is possible to bypass the defensive capabilities by adding a registry key as SYSTEM. Recommendations: For WatchGuard EPDR version 8.0.21.000...

Security Bulletin: Cross-Site Scripting Attacks (XSS) on Service Portal

Summary The Service Portal web application delivers data to its users along with other trusted dynamic content, without validating it. The regex-based input HTML replacement may turn sanitized code into un-sanitized code. Vulnerability Details Refer to the security bulletins listed in the...