CVE-2021-41948: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...

PT-2022-11515

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 and earlier Description A cross-site scripting XSS issue exists in the contact us plugin via the List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

US and China Exposed Most Databases Among 308,000 Discovered in 2021

By Waqas In total, 308,000 unsecured databases were found exposing sensitive assets worldwide of which around 90,000 databases have already… This is a post from HackRead.com Read the original post: US and China Exposed Most Databases Among 308,000 Discovered in 2021...

The US Saw a Spike in Child Sexual Abuse URLs in 2021

CSAM hosting in the United States rose 64 percent last year, putting the country second in the world, a new report found...

Google Android elevation of privilege vulnerability (CNVD-2022-43231)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from the lack of a warning to the user in the TBD of TBD and can be steered using a hidden debugging policy. An attacker could use...

The US Cyber Incident Reporting Act – its impact and its requirements for Critical Infrastructure Entities

...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-43857)

Google Android is a Linux-based open-source operating system from the US company Google...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-44606)

Google Android is a Linux-based open-source operating system from the US company Google...

Google Android Security Bypass Vulnerability (CNVD-2022-32845)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to arbitrarily modify and set system properties...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-44607)

Google Android is a Linux-based open-source operating system from the US company Google...

Mattermost has an unspecified vulnerability (CNVD-2022-65351)

Mattermost is an open source collaboration platform from Mattermost, a US-based company. mattermost has a security vulnerability and no details of the vulnerability are available at this time...

It’s legal to scrape public data—US appeals court

Web scraping—the automated extraction of data from websites—has been around for a long time. Simultaneously cursed and praised, with nobody being able to quite land the decisive blow about whether it should be allowed, one way or another. This may have changed, thanks to a recent US appeals court...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-44609)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an elevation of privilege vulnerability that can be exploited by attackers to cause an escalation of privileges...

The Fake Federal Agents Case Baffling US Intelligence Experts

Guns. Luxury apartments. Duped Secret Service personnel. Did the FBI uncover a foreign plot, or something more ridiculous?...

Google Android elevation of privilege vulnerability (CNVD-2022-42138)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to cause a local privilege escalation...

GitHub Blocks Accounts of Two Large Russian Banks Amid US Sanctions

By Waqas As of now, this move has mainly impacted two large banks reportedly Sberbank and Alfa-Bank, and some individual… This is a post from HackRead.com Read the original post: GitHub Blocks Accounts of Two Large Russian Banks Amid US Sanctions...

Inductive Automation Ignition

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Inductive Automation Equipment: Ignition Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated attacker with network access to...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-28910)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android has security vulnerabilities that can be exploited by attackers to submit special requests that can execute arbitrary code in the application context and elevate privileges...

OrangeHRM Cross-Site Scripting Vulnerability (CNVD-2022-30440)

Orangehrm is a human resource management system HRM from Orangehrm, a US-based company. The system supports personnel information management, leave management, attendance management and recruitment management, etc. Orangehrm version 4.10 has a cross-site scripting vulnerability that can be...