Read Time:6 Second
The open letter, signed by 50 leading cybersecurity figures, urges the EU to reconsider its proposals around vulnerability disclosure requirements
Daily Archives: October 3, 2023
CVE-2023-0506
Read Time:12 Second
The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access.
USN-6406-1: SpiderMonkey vulnerabilities
Read Time:14 Second
Several security issues were discovered in the SpiderMonkey JavaScript
library. If a user were tricked into opening malicious JavaScript
applications or processing malformed data, a remote attacker could exploit
a variety of issues related to JavaScript security, including denial of
service attacks, and arbitrary code execution.
Predator Spyware Linked to Madagascar’s Government Ahead of Presidential Election
Read Time:6 Second
Cybersecurity firm Sekoia has found new evidence that the Malagasy government has used Cytrox’s spyware ahead of the election
Upstream Supply Chain Attacks Triple in a Year
CVE-2022-47893
Read Time:11 Second
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.
CVE-2022-47892
Read Time:7 Second
All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials.
CVE-2022-47891
Read Time:9 Second
All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
Half of Cybersecurity Professionals Report Increase in Cyber-Attacks
Read Time:5 Second
New research by ISACA has found that the cybersecurity skills gap is contributing to businesses’ cybersecurity preparedness
CVE-2023-0828
Read Time:12 Second
Cross-site Scripting (XSS) vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms.