Fedora: Security Advisory for uriparser (FEDORA-2022-00a529a8bf)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ransomware cyberattack forces New Mexico jail to lock down

Five days after the new year, the Metropolitan Detention Center MDC in Bernalillo County, New Mexico suddenly went on lockdown. The reason? A ransomware cyberattack has knocked the jails internet connection offline, rendering most of their data systems, security cameras, and automatic doors...

Ransomware attack on New Mexico jail put prisoners in lockdown

By Deeba Ahmed The Metropolitan Detention Center MDC in Bernalillo County, New Mexico went offline due to a ransomware attack, and… This is a post from HackRead.com Read the original post: Ransomware attack on New Mexico jail put prisoners in lockdown...

New York AG Warns 17 Firms of Credential Attacks

New York Attorney General Letitia James reported 1.1 million credentials tied to 17 “well known” state businesses were compromised in recent cyberattacks. According to the alert, many of the firms were unaware that that their customer’s passwords had been compromised. The bulletin was issued...

The vulnerability of the Windows Media Center component of the Windows operating system, which allows a hacker to gain elevated privileges

The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

Description of the security update for SharePoint Server Subscription Edition: January 11, 2022 (KB5002111)

None None...

WordPress plugin PublishPress Capabilities 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. The WordPress plugin PublishPress Capabilities suffers from a...

CVE-2022-22121

In NocoDB, versions 0.81.0 through 0.83.8 are affected by CSV Injection vulnerability Formula Injection. A low privileged attacker can create a new table to inject payloads in the table rows. When an administrator accesses the User Management endpoint and exports the data as a CSV file and opens...

Cross-site Scripting in DayByDay CRM

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting XSS vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the...

CVE-2021-46041

A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64boxnew function, which causes a Denial of Service...

UBUNTU-CVE-2021-46041

A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64boxnew function, which causes a Denial of Service...

Cloud video platform abused in web skimmer attack against real estate sites

By Deeba Ahmed New Web Skimmer Campaign Exploiting Cloud Video Distribution Supply Chain to Target Real Estate Sites. This is a post from HackRead.com Read the original post: Cloud video platform abused in web skimmer attack against real estate sites...

CVE-2022-22109

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting XSS vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the...

carrizozoinncarrizozonewmexico.us Cross Site Scripting vulnerability OBB-2322473

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

graylineneworleans.com Cross Site Scripting vulnerability OBB-2319450

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2021-1002654 netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc

netdevsim: Zero-initialize memory for new map's value in function nsimbpfmapalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by...

CVE-2021-4068

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

DEBIAN-CVE-2021-4068

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

UBUNTU-CVE-2021-4068

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

OPENSUSE-SU-2021:1603-1 Security update for netdata

This update for netdata fixes the following issues: Update to 1.31.0 go.d.plugin 0.29.0 The v1.31.0 release of Netdata comes with re-packaged and redesigned elements of the dashboard to help you focus on your metrics, even more Linux kernel insights via eBPF, on-node machine learning to help you...