Read Time:5 Second
The ransomware strain uses a signed component of the Palo Alto Cortex XDR Dump Service Tool
Monthly Archives: April 2023
Western Digital Hit By Network Security Breach
Read Time:4 Second
The incident involved an unauthorized third party gaining access to several systems
CVE-2020-19850
Read Time:8 Second
An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.
CVE-2020-19699
Read Time:9 Second
Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page.
CVE-2020-19698
Read Time:9 Second
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
CVE-2020-19697
Read Time:10 Second
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter.
CVE-2020-19695
Read Time:8 Second
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.
CVE-2020-19693
Read Time:8 Second
An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswrap_function_replacewith endpoint.
CVE-2020-19692
Read Time:9 Second
Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file.
CVE-2020-19279
Read Time:5 Second
Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links.