Read Time:8 Second
A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object.
Monthly Archives: December 2022
CVE-2020-36607
Read Time:8 Second
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
CVE-2020-24855
Read Time:6 Second
Directory Traversal vulnerability in easywebpack-cli before 4.5.2 allows attackers to obtain sensitive information via crafted GET request.
CVE-2020-21219
Read Time:13 Second
Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acme_certificate_edit.php page of the ACME package.
CVE-2020-20589
Read Time:8 Second
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
CVE-2020-20588
Read Time:9 Second
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.
Senate Approves Bill Banning TikTok From US Government Devices
Read Time:4 Second
The bill still needs to receive approval from the US House of Representatives
Microsoft approved and digitally-signed malicious drivers used in ransomware attacks
Read Time:13 Second
Microsoft has warned that malicious hackers were able to get the software giant to digitally sign their code so it could be used in attacks, such as the deployment of ransomware.
Read more in my article on the Hot for Security blog.
NSA, CISA Warn Against Threats to 5G Network Slicing
Read Time:4 Second
Improper network slice management may enable attackers to access data from different network slices
Loan Scam Campaign ‘MoneyMonger’ Exploits Flutter to Hide Malware
Read Time:5 Second
Zimperium said the code was part of an existing campaign previously discovered by K7 Security Labs