1345 matches found
PT-2022-6158 · Dell · Dell Geodrive
Name of the Vulnerable Software and Affected Versions: Dell GeoDrive versions 2.1 through 2.2 Description: The issue is related to an information disclosure vulnerability. It allows an authenticated non-admin user to potentially gain access to sensitive information. The vulnerability is also...
Hookup site targeted by typo-squatters
Ethical hacker and security researcher Kody Kinzie shared with BleepingComputer a list of over 50 domains of which many are spelling variations of the brand name Sniffies. Sniffies identifies itself as a "modern, map-based, meetup app for gay, bi, and curious guys." Kody used an open source tool...
ASB-A-235102694
Bulletin has no description...
Hackers Using Fake DDoS Protection Pages to Distribute Malware
WordPress sites are being hacked to display fraudulent Cloudflare DDoS protection pages that lead to the delivery of malware such as NetSupport RAT and Raccoon Stealer. "A recent surge in JavaScript injections targeting WordPress sites has resulted in fake DDoS prevent prompts which lead victims ...
Security Bulletin: Vulnerability in Apache Struts affects SAN Volume Controller and Storwize Family (CVE-2014-7809)
Summary An Open Source Apache Struts vulnerability was disclosed in August 2014. Struts is used by SAN Volume Controller and Storwize Family. Vulnerability Details CVEID: CVE-2014-7809 DESCRIPTION: Apache Struts could allow a remote attacker to bypass security restrictions, caused by predictable...
MAL-2022-3523 Malicious code in gulpuil (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be4f640bc9952e08c1d3e6acefd9bb76206f2f6272be88926515439f931be3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Impact Our library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function was used to execute strings that begin with "function" as Javascript. This was an oversight that unfortunately allows arbitrary code to be...
Universities Put Email Users at Cyber Risk
Top U.S. universities are among the worst in the world at protecting users from email fraud, lacking security measures to prevent common threat tactics such as domain spoofing or other types of fraudulent emails, researchers have found. Ninety-seven percent of the top 10 universities in the Unite...
PT-2022-23714 · Ipswitch · Ws Ftp Server
Name of the Vulnerable Software and Affected Versions: In Progress WS FTP Server versions prior to 8.7.3 Description: The issue concerns forms within the administrative interface that did not include a nonce, which is used to mitigate the risk of cross-site request forgery CSRF attacks. CSRF...
PUB-A-228560328
Bulletin has no description...
The Kit That Wants It All: Scam Mimics PayPal?s Known Security Measures
Identity theft affects millions of people every year. See this piece on a scam purporting to be PayPal in an effort to gain total identity theft...
Vulnerabilities fixed in Siemens products
Vulnerabilities have been fixed in several Siemens products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Circumvention of security measure...
Code injection
In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests...
What Are Common Cyber Threats to Manufacturers and How Can They Secure Themselves
By Owais Sultan In todays digital age, manufacturers increasingly rely on technology to run their businesses. However, this dependence also makes… This is a post from HackRead.com Read the original post: What Are Common Cyber Threats to Manufacturers and How Can They Secure Themselves...
PT-2022-3321 · Ws7200-10 · Ws7200-10
Name of the Vulnerable Software and Affected Versions: WS7200-10 version 11.0.2.13 Description: The issue is related to a password verification vulnerability. It allows attackers on the LAN to use brute force cracking to obtain passwords, potentially disclosing sensitive system information. The...
Elcomplus SmartICS
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Elcomplus LLC Equipment: SmartICS Vulnerabilities: Improper Access Control, Relative Path Traversal, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow...
Keeping PowerShell: Measures to Use and Embrace
Cybersecurity authorities from the United States, New Zealand, and the United Kingdom have released a joint Cybersecurity Information Sheet CIS on PowerShell. The CIS provides recommendations for proper configuration and monitoring of PowerShell, as opposed to removing or disabling it entirely du...
TiDB authentication bypass vulnerability
Impact Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access. Only users using TiDB 5.3.0 are affected by this vulnerability. Patches Please upgrade to TiDB 5.3.1 or high...
Carrier LenelS2 HID Mercury access panels protection mechanism failure vulnerability
Carrier LenelS2 HID Mercury access panels is a controller panel from Carrier, Inc. A protection mechanism failure vulnerability exists in Carrier LenelS2 HID Mercury access panels, which stems from inadequate implementation of security measures and can be exploited by remote attackers to Update t...