MAL-2022-6444 Malicious code in tech-doc-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dee66703b31e37413a9adb8a1182b0bad51b5cfb28fb03747f5dc30068e9196 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tech-doc-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dee66703b31e37413a9adb8a1182b0bad51b5cfb28fb03747f5dc30068e9196 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7259 Malicious code in x-road-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81945cd23cfc6cea9cafc4f34272c267be424f5c5c28100a9d40e2f098cad58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in x-road-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81945cd23cfc6cea9cafc4f34272c267be424f5c5c28100a9d40e2f098cad58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Why Paper Receipts are Money at the Drive-Thru

Check out this handmade sign posted to the front door of a shuttered Jimmy Johns sandwich chain shop in Missouri last week. See if you can tell from the store owners message what happened. If you guessed that someone in the Jimmy Johns store might have fallen victim to a Business Email Compromise...

CVE-2022-30422

Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter...

Remote code execution

Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter...

CVE-2022-30422

Planet Time Enterprise by Proietti Tech Srl (versions 4.2.0.1, 4.2.0.0, 4.1.0.0, 4.0.0.0, 3.3.1.0, 3.3.0.0) is affected by CVE-2022-30422 due to a remote code execution vulnerability originating from the Viewstate parameter. The Red Hat, NVD, and CVE records consistently describe this as a remote...

CVE-2022-30422

Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter...

Proietti Tech srl Planet Time Enterprise 信任管理问题漏洞

Proietti Tech Srl Proietti Tech srl Planet Time Enterprise is an attendance management software from Proietti Tech Srl, Italy. It facilitates human resource management through process automation and process simplification, making information available in real time. A security vulnerability exists...

Neetai Tech SQL Injection Vulnerability

Neetai Tech is a web development, GST software and accounting software from Neetai India.Neetai Tech is vulnerable to SQL injection, which can be exploited by attackers to cause sql injection issues via manipulation of the /product.php file...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at the Dublin Tech Summit in Dublin, Ireland, June 15-16, 2022. The list is maintained on this page...

Taking down the IP2Scam tech support campaign

Tech support scams follow a simple business model that has not changed much over the years. After all, why change a recipe that continues to yield large profits. We see countless such campaigns and block them indiscriminately to protect our customers from being defrauded by a fraudulent tech...

CVE-2020-36540

A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

Neetai Tech SQL注入漏洞

Neetai Tech is a web development, GST software and accounting software from Neetai India.Neetai Tech is vulnerable to SQL injection, which can be exploited by attackers to cause sql injection issues via manipulation of the /product.php file...

CVE-2020-36540 Neetai Tech product.php sql injection

A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2020-36540 Neetai Tech product.php sql injection

A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2020-36540

CVE-2020-36540 describes a remote SQL injection vulnerability in Neetai Tech, affecting an unknown function in /product.php. Multiple connected records identify the issue as critical/high risk, with exploitability over the network and public disclosure. Evidence confirms SQL injection as the unde...

Me on Public-Interest Tech

Back in November 2020, in the middle of the COVID-19 pandemic, I gave a virtual talk at the International Symposium on Technology and Society: "The Story of the Internet and How it Broke Bad: A Call for Public-Interest Technologists." It was something I was really proud of, and its finally up on...