1913 matches found
Virtuozzo Hybrid Infrastructure 5.4 Update 2 (5.4.2-58)
In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute services, core and object storage, integrations, monitoring and alerts. Additionally, this release delivers stability improvements and addresses issues found in previous releases. Vulnerabilit...
ABB SPIET800 and PNI800 Incomplete Internal State Distinction (CVE-2021-22285)
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive. This plugin only works with Tenable.ot. Please visit...
ABB SPIET800 and PNI800 Improper Handling of Unexpected Data Type (CVE-2021-22286)
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 809...
Google and Apple cooperate to address unwanted tracking
Google and Apple have announced that they are looking for input from industry participants and advocacy groups on a draft specification to alert users in the event of suspected unwanted tracking. Samsung, Tile, Chipolo, eufy Security, and Pebblebee have stated that they will support the...
CVE-2022-4259
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application...
CVE-2022-4259
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application...
CVE-2022-4259 Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application...
Nozomi Networks Guardian SQL注入漏洞
Nozomi Networks Guardian is an IoT device and software inspection system from US-based Nozomi Networks. A security vulnerability exists in Nozomi Networks Guardian and CMC that stems from improper input validation in the Alerts Controller. An attacker could exploit the vulnerability to execute...
PT-2023-14141 · Nozomi Networks · Nozomi Networks Guardian +1
Name of the Vulnerable Software and Affected Versions: Nozomi Networks Guardian and CMC affected versions not specified Description: The issue is caused by improper input validation in the Alerts controller, allowing an authenticated attacker to execute arbitrary SQL queries on the DBMS used by t...
Stream < 3.9.3 - Missing Authorization via load_alerts_settings
...
Introducing the Malwarebytes Admin app: Endpoint security at your fingertips
If youre on the beach sipping piña coladas, the last thing you probably want to do is rush to your desktop and address a critical security issue. And yet, this is the reality for many IT security professionals today. Regardless of the time or current location, security pros are expected to drop...
Mozilla: Fullscreen notification obscured
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls. This could have led to user confusion and possible spoofing attack...
Pinacolada - Wireless Intrusion Detection System For Hak5's WiFi Coconut
Pinacolada looks for typical IEEE 802.11 attacks and then informs you about them as quickly as possible. All this with the help of Hak5's WiFi Coconut, which allows it to listen for threats on all 14 channels in the 2.4GHz range simultaneously. Supported 802.11 Attacks Attack | Type | Status...
CVE-2023-22620
creationtimestamp| type| source ---|---|--- 2023-04-13 02:29:41+00:00| seen| https://t.me/cibsecurity/62044 2023-04-14 13:24:16+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8116 2024-11-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from Microsoft USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...
Steer clear of this EE phish that wants your card details
Watch out for this piece of spam lurking in mail boxes and claiming to be from the EE mobile network. The mail, titled "We were unable to renew your monthly plan" with a likely random reference number alongside it, reads as follows: Due to a problem with your card, we were unable to charge your...
March 28, 2023—KB5023778 (OS Build 22621.1485) Preview
None None...
Design/Logic Flaw
GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for database access may be unintentionally...
CISA to Start Issuing Early-Stage Ransomware Alerts
By Deeba Ahmed According to CISA, this new initiative will be helpful for organizations/institutions in the public health, education, and government sectors. This is a post from HackRead.com Read the original post: CISA to Start Issuing Early-Stage Ransomware Alerts...
Lexmark Printer Input Validation Vulnerability (CVE-2023-26070)
Multiple Lexmark printer devices are prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...