CVE-2021-35465

Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and...

Code injection

Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and...

The value of regulator-driven red teaming: CBEST

How do we in the UK avoid something like the Colonial Oil Pipeline ransomware attack happening? How would you feel if your mobile phone suddenly stopped working altogether? What if ambulances couldn’t respond to 999 emergency calls? What if the mechanism of government suddenly ground to a halt? T...

Microchip MiWi 安全漏洞

Microchip MiWi is a proprietary wireless protocol from Microchip that supports point-to-point star network connections. A security vulnerability exists in Microchip MiWi v6.5 that can bypass privilege authentication for illegal operation...

What you need to know: Transitioning CSA STAR for Cloud Controls Matrix 4.0

In January of this year, the Cloud Security Alliance CSA released a major revision to its widely adopted Cloud Controls Matrix CCM in the form of version 4.0. This comes in the middle of a calendar year where several alternative information security frameworks are also expected to be refined,...

Flying FishStar Enterprise Intelligent Internet Behavior Management System suffers from information leakage vulnerability (CNVD-2021-41503)

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Why Geek Pride Day is Something to be Proud Of

It’s fair to say that the majority of us who work in cybersecurity are ‘of a certain mindset’. There’s something that comes with the culture and tradition of personal computing, coding, and data that fosters an interest in elements of geek counter culture. Happy to wear our fandoms, obsessions, a...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd (CNVD-2021-39296)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd (CNVD-2021-39299)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

Beijing Century Changqiu Technology Co., Ltd. Century Star configuration software has a logic flaw vulnerability

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. There is a logic flaw vulnerability in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by attackers to obtain sensitive...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd (CNVD-2021-39298)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co. Ltd (CNVD-2021-39297)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

Mozilla Firefox 72 IonMonkey - JIT Type Confusion Exploit

Exploit Title: Firefox 72 IonMonkey - JIT Type Confusion Exploit Author: deadlock Forrest Orr Vendor Homepage: https://www.mozilla.org/en-US/ Software Link: https://www.mozilla.org/en-US/firefox/new/ Versions: Firefox | | /| \ | |\ / / \ | | / | | / / / / |/ | /|/ \ / / || /|| / / / / /...

Star (Hangzhou) Network Technology Co., Ltd. cloud digital signage in unauthorized access vulnerability

Cloud digital signage can be fast program production, one-click publishing, wonderful template material easy to apply and so on. Star Hangzhou Network Technology Co., Ltd. cloud digital signage in the unauthorized access vulnerability, attackers can use the vulnerability to obtain sensitive...

CVE-2020-35438

Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...

CVE-2020-35438

Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...

Cross site scripting

Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...

CVE-2020-35438

Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...

CVE-2020-35438

CVE-2020-35438 is a Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin prior to version 4.1.5. The issue affects the plugin’s handling of user-provided input in its rating functionality, enabling an attacker to inject malicious scripts. Public sources in connected documents co...

PT-2021-11765 · Unknown · Kk Star Ratings

Name of the Vulnerable Software and Affected Versions: kk Star Ratings plugin versions prior to 4.1.5 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to...