5532 matches found
CVE-2024-11436 Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting
The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.4.19 due to insufficient input sanitization an...
CVE-2024-11436: Improper Neutralization of Input During Web Page Generation
The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.4.19 due to insufficient input sanitization an...
Monitouch V-SFT Buffer Overflow
The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V10 files...
Monitouch V-SFT Buffer Overflow
The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V9C files...
Monitouch V-SFT Buffer Overflow
The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8 files...
Monitouch V-SFT Buffer Overflow
The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V10 files...
Monitouch V-SFT Buffer Overflow
The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8C files...
Fuji Electric Monitouch V-SFT X1 File Parsing Out-of-Bounds Write Code Execution Vulnerability
Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI from Fuji Electric. It supports a variety of features including customizable home screen, PDF document viewer, video player, alarm messages, 10 pop-up windows, and more. An out-of-bounds write code executio...
Fuji Electric Monitouch V-SFT V10 File Parsing Buffer Overflow Vulnerability
Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI from Fuji Electric. It supports a variety of features including customizable home screen, PDF document viewer, video player, alarm messages, 10 pop-up windows, and more. A buffer overflow vulnerability exis...
Why Simulating Phishing Attacks Is the Best Way to Train Employees
Despite advancements in cybersecurity tools, human vulnerability remains the weakest link, with phishing among the most dangerous forms…...
Fuji Electric Monitouch V-SFT 安全漏洞
Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI provided by Fuji Electric. Fuji Electric Monitouch V-SFT suffers from a buffer overflow vulnerability that originates from not properly validating the length of user-supplied data before copying it into a...
Fuji Electric Monitouch V-SFT 安全漏洞
Fuji Electric Monitouch V-SFT is a human-machine interface HMI configuration software developed by Fuji Electric, which is mainly used in industrial automation, providing touch screen interface design, PDF document viewing, video playback, alarm messages and other functions. Fuji Electric Monitou...
Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across Europe and Asia
Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia, East Asia, and Europe. Recorded Future's Insikt Group, which has assigned the activity cluster the name TAG-110, said it overlaps with a threat group tracked by the Computer...
NHIs Are the Future of Cybersecurity: Meet NHIDR
The frequency and sophistication of modern cyberattacks are surging, making it increasingly challenging for organizations to protect sensitive data and critical infrastructure. When attackers compromise a non-human identity NHI, they can swiftly exploit it to move laterally across systems,...
DEBIAN-CVE-2024-50302
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via...
UBUNTU-CVE-2024-50302
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via...
The Problem of Permissions and Non-Human Identities - Why Remediating Credentials Takes Longer Than You Think
According to research from GitGuardian and CyberArk, 79% of IT decision-makers reported having experienced a secrets leak, up from 75% in the previous year's report. At the same time, the number of leaked credentials has never been higher, with over 12.7 million hardcoded credentials in public...
PT-2024-34127
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to a possible leak of kernel memory contents to a USB HID due to uninitialized data in the Linux kernel. This could lead to physical information disclosure with no...
More Spyware, Fewer Rules: What Trump’s Return Means for US Cybersecurity
Experts expect Donald Trump’s next administration to relax cybersecurity rules on businesses, abandon concerns around human rights, and take an aggressive stance against the cyber armies of US adversaries...
