WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection

The plugin does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks PoC...

WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 4.7 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by Krzysztof Zając in WordPress WP Visitor Statistics Real Time Traffic plugin versions = 4.7. Solution Update the WordPress WP Visitor Statistics Real Time Traffic plugin to the latest available version at least 4.8...

How to Build a Security Awareness Training Program that Yields Measurable Results

Organizations have been worrying about cyber security since the advent of the technological age. Today, digital transformation coupled with the rise of remote work has made the need for security awareness all the more critical. Cyber security professionals are continuously thinking about how to...

How Imperva Leverages AWS to Help Customers Prevent Attacks

At Imperva, we’re passionate about being a trusted security partner for our customers, so we continually invest in the availability, resiliency, and scalability of our global network. We’ve made significant investments over the past year to expand our cloud footprint, including rebuilding and...

SUSE-SU-2021:3723-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Real Time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory bsc1188563. -...

kernel-rt security and bug fix update

An update for kernel-rt is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

RLSA-2021:4646 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Insufficient validation of user-supplied sizes for the MSGCRYPTO message type CVE-2021-43267 kernel: timer tree corruption leads t...

kernel-rt security and bug fix update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

The vulnerability of clients for conducting real-time audio and video conferences in Zoom Client for Meetings for Windows, due to lack of access control mechanisms, allows attackers to escalate their privileges.

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the WhatsApp messaging and video call application, related to the execution of operations outside the buffer, allows a perpetrator to execute arbitrary code.

The vulnerability of the WhatsApp messaging and video call application is related to the issue of the operation outside the buffer during the processing of SRTCP packets. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially created SRTCP packets...

The vulnerability of clients for conducting real-time audio and video conferences in Zoom Client for Meetings for Windows, due to lack of access control mechanisms, allows attackers to escalate their privileges.

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Connext Dds 多款产品缓冲区错误漏洞

Real-Time Innovations Connext Dds Professional and Connext Dds Secure are both products of Real-Time Innovations, Inc. Connext Dds Professional is a software framework designed to meet the demanding connectivity requirements of autonomous systems. Connext Dds Secure is a trusted software...

Multiple Data Distribution Service (DDS) Implementations (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendors: Eclipse, eProsima, GurumNetworks, Object Computing, Inc. OCI, Real-Time Innovations RTI, TwinOaks Computing Equipment: CycloneDDS, FastDDS, GurumDDS, OpenDDS, Connext DDS Professional, Connext DDS...

tCell by Rapid7 Supports the Newly Released .NET 6.0

We’re excited to share that we've coordinated our recent .NET and .NET Core agent releases with the brand new .NET 6.0 release from Microsoft. What is tCell? Since the founding of tCell by Rapid7, our web application and API protection solution, we’ve prided ourselves on providing both breadth an...

CVE-2021-42301

Azure RTOS Information Disclosure Vulnerability...

The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or trigger service interruptions.

The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge stems from the execution of operations outside of the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures through a...

The vulnerability in the implementation of the calloc() and mm_zalloc() functions in the Tizen RT operating systems allows a hacker to cause a service failure.

The vulnerability of the calloc and mmzalloc functions in Tizen RT operating systems is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

SIMATIC RTLS 日志信息泄露漏洞

SIMATIC RTLS Locating Manager is used to configure, operate, and maintain SIMATIC RTLS units, a real-time wireless location system that provides location solutions.A log information disclosure vulnerability exists in Siemens SIMATIC RTLS Locating Manager, which stems from the fact that applicatio...

Microsoft Azure Real Time Operating System 信息泄露漏洞

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. The vulnerability stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerability to obtain sensitive...