Recently we have been wondering whether it makes a difference (from a security and privacy perspective) what brand laptops should be used in our company. I have heard wild stories about backdoors existing in "most" laptops (esp. …
A botnet previously considered to be rendered inert has been observed enslaving end-of-life (EoL) small home/small office (SOHO) routers and IoT devices to fuel a criminal proxy service called Faceless.
“TheMoon, which emerged in 2014, h…
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. Currently enumerates the following: Amazon Web Services: – Open / Protected S3 Buckets – awsapps (WorkMail, WorkDocs, Connect, etc.) Microsoft Azure: – Storage …
Network penetration testing plays a vital role in detecting vulnerabilities that can be exploited. The current method of performing pen testing is pricey, leading many companies to undertake it only when necessary, usually once a year for their complia…
Details have emerged about a vulnerability impacting the “wall” command of the util-linux package that could be potentially exploited by a bad actor to leak a user’s password or alter the clipboard on certain Linux distributions.
The bug, tracked as CV…
A vulnerability was found in Linux Kernel up to 2.6.20/6.5.3. It has been rated as critical. This issue affects the function flush_work of the component push-switch. The manipulation leads to use after free.
The identification of this vulnerability is…
A vulnerability was found in stylemix MasterStudy LMS WordPress Plugin up to 3.3.1 on WordPress. It has been declared as critical. This vulnerability affects the function _register_user. The manipulation leads to improper authentication.
This vulnerab…
A vulnerability was found in Zimbra zm-admin-ajax up to 8.8.1. It has been classified as problematic. This affects the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js of the component Form Textbox Field Error H…
A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected by this issue is the function admin_page_load/admin_page of the file tfo-graphviz-admin.php. The manipulation leads to cross site scr…
A vulnerability has been found in tsina News Wall Plugin up to 1.1.0 on WordPress and classified as problematic. Affected by this vulnerability is the function nwap_newslist_page of the component Setting Handler. The manipulation leads to cross-site re…
