2778 matches found
govuk_tech_docs vulnerable to unescaped HTML on search results page
Impact Pages that are indexed in search results have their entire contents indexed, including any HTML code snippets. These HTML snippets would appear in the search results unsanitised, so it was possible to render arbitrary HTML or run arbitrary scripts. This is a low risk security issue; to...
GHSA-W6Q2-48CH-FJ26 Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
Allegro Tech BigFlow prior to 1.6.0 is vulnerable to Missing SSL Certificate Validation...
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
Allegro Tech BigFlow prior to 1.6.0 is vulnerable to Missing SSL Certificate Validation...
CVE-2023-25392
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
Input validation
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign
Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites...
CVE-2023-25392
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
CVE-2023-25392
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
PT-2023-20043
Name of the Vulnerable Software and Affected Versions Allegro Tech BigFlow versions prior to 1.6.0 Description The issue is related to Missing SSL Certificate Validation. This means that the software may not properly verify the identity of the server it is connecting to, potentially allowing for...
CVE-2023-25392
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
CVE-2023-25392: Improper Certificate Validation
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
CVE-2023-25392
CVE-2023-25392 affects Allegro Tech BigFlow before 1.6.0. The issue is a lack of SSL certificate validation in BigFlow, enabling potential interception of traffic and exposure of confidential information (CVSS 3.1: Confidentiality High; Vector Network; Complexity High; Privileges None). Several c...
I-TECH TrainSmart SQL注入漏洞
I-TECH TrainSmart is an open source web-based training data collection system from I-TECH. A security vulnerability exists in I-TECH TrainSmart version r1044 that stems from the presence of a SQL injection vulnerability...
A Tiny Blog Took on Big Surveillance in China—and Won
Digging through manuals for security cameras, a group of gearheads found sinister details and ignited a new battle in the US-China tech war...
A Serial Tech Investment Scammer Takes Up Coding?
John Clifton Davies, a 60-year-old con man from the United Kingdom who fled the country in 2015 before being sentenced to 12 years in prison for fraud, has enjoyed a successful life abroad swindling technology startups by pretending to be a billionaire investor. Davies newest invention appears to...
Threat Source newsletter (March 30, 2023) — It’s impossible to tell if your home security camera or doorbell is truly safe
Welcome to this weeks edition of the Threat Source newsletter. Everyone loves a good video of someone slipping on their icy steps in the winter, captured thanks to their home security camera or smart doorbell. But what about when that camera is just kind of chilling out and not catching the momen...
accounting.chrisreedtech.com Cross Site Scripting vulnerability OBB-3241407
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Fighting mercenaries with the Cybersecurity Tech Accord
Trend Micro co-Authors Cyber Mercenary Principles to help guide the technology industry and others in dealing with the growing market of cyber mercenaries...
2023 Cybersecurity Maturity Report Reveals Organizational Unpreparedness for Cyberattacks
In 2022 alone, global cyberattacks increased by 38%, resulting in substantial business loss, including financial and reputational damage. Meanwhile, corporate security budgets have risen significantly because of the growing sophistication of attacks and the number of cybersecurity solutions...