CISA: CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities
CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities Today, CISA and the...
CISA: CISA Releases One Industrial Control Systems Advisory
CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on March 21, 2024. These...
CISA: Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry
Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry Ivanti has released security advisories to address vulnerabilities in...
CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094
Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094 CISA and the open source community are responding to...
CISA: CISA Releases Four Industrial Control Systems Advisories
CISA Releases Four Industrial Control Systems Advisories CISA released four Industrial Control Systems (ICS) advisories on March 26, 2024. These...
CISA: Apple Released Security Updates for Safari and macOS
Apple Released Security Updates for Safari and macOS Apple released security updates to address a vulnerability (CVE-2024-1580) in Safari and macOS....
CISA: Cisco Releases Security Updates for Multiple Products
Cisco Releases Security Updates for Multiple Products Cisco released security updates to address vulnerabilities in Cisco IOS, IOS XE, and...
TinyMCE cross-site scripting | CVE-2024-29881
NAME__________TinyMCE cross-site scriptingPlatforms Affected:TinyMCE TinyMCE 6.8.0Risk Level:4.7Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________TinyMCE is vulnerable to cross-site scripting, caused by improper validation of user-supplied...
JetBrains TeamCity security bypass | CVE-2024-31134
NAME__________JetBrains TeamCity security bypassPlatforms Affected:JetBrains TeamCityRisk Level:6.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________JetBrains TeamCity could allow a remote authenticated attacker to bypass security restrictions,...
JetBrains TeamCity open redirect | CVE-2024-31135
NAME__________JetBrains TeamCity open redirectPlatforms Affected:JetBrains TeamCityRisk Level:6.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________JetBrains TeamCity could allow a remote attacker to conduct phishing attacks, caused...
JetBrains TeamCity security bypass | CVE-2024-31136
NAME__________JetBrains TeamCity security bypassPlatforms Affected:JetBrains TeamCityRisk Level:7.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________JetBrains TeamCity could allow a remote attacker to bypass security restrictions, caused...
Apache Fineract SQL injection | CVE-2024-23538
NAME__________Apache Fineract SQL injectionPlatforms Affected:Apache Fineract 1.8.4Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Apache Fineract is vulnerable to SQL injection. A remote attacker could...
JetBrains TeamCity cross-site scripting | CVE-2024-31138
NAME__________JetBrains TeamCity cross-site scriptingPlatforms Affected:JetBrains TeamCityRisk Level:4.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________JetBrains TeamCity is vulnerable to cross-site scripting, caused by improper validation of...
Apache Fineract privilege escalation | CVE-2024-23537
NAME__________Apache Fineract privilege escalationPlatforms Affected:Apache Fineract 1.8.4Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Apache Fineract could allow a remote authenticated attacker to gain elevated...
Apache Fineract SQL injection | CVE-2024-23539
NAME__________Apache Fineract SQL injectionPlatforms Affected:Apache Fineract 1.8.4Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Apache Fineract is vulnerable to SQL injection. A remote attacker could...
JetBrains TeamCity cross-site scripting | CVE-2024-31137
NAME__________JetBrains TeamCity cross-site scriptingPlatforms Affected:JetBrains TeamCityRisk Level:6.8Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________JetBrains TeamCity is vulnerable to cross-site scripting, caused by improper validation of...
BianLian Ransomware Victim: Pavilion Construction LLC
BianLian Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
Atandt Confirms Data For 73 Million Customers Leaked On Hacker Forum
AT&T has finally confirmed it is impacted by a data breach affecting 73 million current and former customers after initially...
Vultur Banking Malware For Android Poses As Mcafee Security App
Security researchers found a new version of the Vultur banking trojan for Android that includes more advanced remote control capabilities...
CISA: CISA, FBI, and MS-ISAC Release Update to Joint Guidance on Distributed Denial-of-Service Techniques
CISA, FBI, and MS-ISAC Release Update to Joint Guidance on Distributed Denial-of-Service Techniques Today, CISA, the Federal Bureau of Investigation...
CISA: CISA Releases One Industrial Control Systems Advisory
CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on March 21, 2024. These...
CISA: CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities
CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities Today, CISA and the...
