CVE-2025-0410

creationtimestamp| type| source ---|---|--- 2025-01-13 02:40:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113818732180843425 2025-01-13 03:08:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1348 2025-01-13 03:15:52+00:00| seen|...

CVE-2024-56337

creationtimestamp| type| source ---|---|--- 2024-12-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1447 2024-12-20 15:35:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113685883850360893 2024-12-20 16:15:55+00:00| seen|...

CVE-2024-48844

creationtimestamp| type| source ---|---|--- 2024-12-05 13:07:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113600369510957224 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01 2025-04-16 21:02:26+00:00| seen|...

We can try to bridge the cybersecurity skills gap, but that doesn’t necessarily mean more jobs for defenders

I have written about the dreaded " cybersecurity skills gap" more times than I can remember in this newsletter, but I feel like it's time to revisit this topic again. That's because the White House announced a new initiative last week for the U.S. government called the " Service for America"...

CVE-2024-34102

creationtimestamp| type| source ---|---|--- 2024-06-13 10:26:36+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus16/2024 2024-06-21 14:20:32+00:00| published-proof-of-concept| https://t.me/HackingInsights/3235 2024-06-21 18:35:05+00:00| seen| https://t.me/truesecator/5886...

DEBIAN-CVE-2021-47001

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix cwnd update ordering After a reconnect, the reply handler is opening the cwnd and thus enabling more RPC Calls to be sent /before/ rpcrdmapostrecvs can post enough Receive WRs to receive their replies. This causes a...

Hookup site targeted by typo-squatters

Ethical hacker and security researcher Kody Kinzie shared with BleepingComputer a list of over 50 domains of which many are spelling variations of the brand name Sniffies. Sniffies identifies itself as a "modern, map-based, meetup app for gay, bi, and curious guys." Kody used an open source tool...

A week in security (January 31 – February 6)

Last week on Malwarebytes Labs: Threat actor steals email with Zimbra zero-day FBI warns of bogus job postings on recruitment sites Investment scams are on the rise A worrying Etsy listing reveals the stalking potential of Apple’s AirTags Beware bogus OperaGX sponsorship offers $320 milllion stol...

WordPress 安全漏洞

WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in WordPress plugin LabTools 1.0 and earlier versions, which stems from a lack of proper authorization when deleting a posting, allowing any authenticated user e.g., a subscriber to delete arbitra...

Unauthorized Postings And Removals

keycloak-services is vulnerable to unauthorized postings and removals. Posting different credential IDs can be done by using the remove devices form, subsequently possibly to perform unauthorized removal of MFA devices of other users...

Cross-site Scripting Vulnerability in DSCms Enterprise Content Management System v1.3

DSCms enterprise station content management system is a enterprise website system launched by Changsha Desha Network Technology Co. DSCms Enterprise Content Management System v1.3 suffers from a cross-site scripting vulnerability, which stems from the failure to filter user-submitted job postings...

NHN PlayArt LINE Denial of Service Vulnerability

NHN PlayArt LINE is a suite of live chat software from the Japanese company NHN PlayArt. A denial of service vulnerability exists in NHN PlayArt LINE version 4.3.1 and prior versions, which allows a remote, authenticated user to cause a denial of service application crash by exploiting the...

WordPress Resume Submissions & Job Postings 2.5.1 - Unrestricted File Upload

No description provided by source. Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link:...

WordPress Resume Submissions / Job Postings 2.5.1 Shell Upload

Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link: http://downloads.wordpress.org/plugin/resume-submissions-job-postings.2.5.1.zip Version: 2.5.1...

WordPress Resume Submissions & Job Postings Plugin - Unrestricted File Upload

Resume Submissions & Job Postings plugin is prone to an unrestricted file upload vulnerability. It causes several problems: uploaded file can be accessed directly by understanding how the plugin renames files, file names are rewritten by the following code, also the plugin creates an MD5 hash of...

WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload

Exploit for php platform in category web applications Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link:...

Apple Security Chief Reportedly Leaves Company

Apple’s vice president of global security has reportedly stepped down roughly two months after the surface of news reports that an iPhone prototype had gone missing for the second time in less than two years. According to reports, John Theriault, who came to Apple from Pfizer and was a former FBI...

Job Search Script - SQL Injection

Job Search Script - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Job Search SQL Injection Vendor url:http://getaphpsite.com Version:1...

Joomla Job Line Cross Site Scripting

=================================================== Joomla comjobline Xss Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

Joomla Component com_jobline Xss Vulnerability

Exploit for php platform in category web applications ============================================== Joomla Component comjobline Xss Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...