Phishers Capitalize on Headlines with Breakneck Speed

The speed with which phishers are able to adapt to new messaging based on the latest headlines is accelerating, according to the Proofpoint Threat Research Team, which was able to track backend data from a recent voter-registration scam to uncover just how quickly cybercriminals can pivot to...

The vulnerability of the D-Link DSL-2875AL router’s microprogramming software lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the D-Link DSL-2875AL router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using a specially created reques...

The vulnerability of the command-line interface of the Cisco AsyncOS operating system allows a hacker to gain unauthorized access to protected information. This vulnerability is exploitable by attackers who target the Cisco Email Security Appliance for security management and the Cisco Content Security Management Appliance for content management systems.

The vulnerability of the Cisco AsyncOS command-line interface for the Cisco Email Security Appliance and the Cisco Content Security Management Appliance security management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker,...

U.S. Dept Of Defense: Local File Inclusion In Registration Page

Summary: When registering on https://████████ it is possible to use path traversal characters in a parameter allowing an attacker to read local files. Description: The registerUserInfoCommand.nextPageName parameter within the registration form is vulnerable to file path manipulation, where it is...

U.S. Dept Of Defense: View another user information with IDOR vulnerability

1- Navigate to the system. https://███████/login.php 2- Navigate to register page. https://██████████/register.phpi created user, username:██████ pass: TEst.123.! 3- Login to the system. https://███/login.php 4- Navigate to "My Profile Page". 5- Intercept the request. 6- Change the "UID2=4820038"...

CVE-2020-10816

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet...

CVE-2020-10816

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet...

The vulnerability of the configd Streamer Log component in the JunOS Evolved operating system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configd component in the Streamer Log system of the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Intel Active Management Technology implementation lies in the insufficient protection of registration data, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Intel Active Management Technology implementation is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the JunOS operating system in Juniper vMX virtual routers allows attackers to increase their privileges.

The vulnerability of the Junos operating system in Juniper vMX virtual routers lies in the storage of pre-installed registration data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the ev.ops configuration file of the JunOS Evolved operating system, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ev.ops configuration file in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the EvoSharedObjStore component of the JunOS Evolved operating system, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the EvoSharedObjStore component in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the JunOS Evolved operating system’s configuration file objmon allows a intruder to gain unauthorized access to protected information.

The vulnerability of the JunOS Evolved operating system’s configuration file objmon is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the configd Trace Handler component in the JunOS Evolved operating system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configd Trace Handler component in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

Voter Registration ‘Error’ Phish Hits During U.S. Election Frenzy

Cybercriminals this week are tapping into this week’s political frenzy with a new phishing lure that warns U.S. targets that their voter registration data needs extra details. The emails purport to come from the U.S. Election Assistance Commission, an independent agency of the United States...

The vulnerability of the JunOS operating system’s NFX250 Series routers allows a hacker to gain full control over the system.

The vulnerability of the JunOS operating system’s NFX250 Series routers lies in the use of pre-installed registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full control over the system...

The vulnerability of the OpenId Connect service’s framework for Apache CXF allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OpenId Connect service for Apache CXF web services is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...

PSMDATP - PowerShell Module For Managing Microsoft Defender Advanced Threat Protection

Welcome to the Microsoft Defender Advanced Threat Protection PowerShell module! This module is a collection of easy-to-use cmdlets and functions designed to make it easy to interface with the Microsoft Defender Advanced Threat Protection API. Motivation I created this PowerShell module for MDATP...

CVE-2020-23828

A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses...