Tag
Ubuntu Security Notice 6702-1 - It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly handle return values in certain error conditions. A local attacker could use this to cause a denial of service. It was discovered that the ARM Mali Display Processor driver implementation in the Linux kernel did not properly handle certain error conditions. A local attacker could possibly use this to cause a denial of service.
By Daily Contributors Last week, Charles Dray from Resonance Security organized a meeting for me with Davide Vicini, the CEO of Freename, which is a company in… This is a post from HackRead.com Read the original post: Owning Versus Renting – The Circumstances of Web3 Domains
Tramyardg Autoexpress version 1.3.0 suffers from a persistent cross site scripting vulnerability.
Tramyardg Autoexpress version 1.3.0 allows for authentication bypass via unauthenticated API access to admin functionality. This could allow a remote anonymous attacker to delete or update vehicles as well as upload images for vehicles.
Tramyardg Autoexpress version 1.3.0 suffers from a remote SQL injection vulnerability.
Quick.CMS version 6.7 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
A manager at an unnamed telecommunications company has admitted to SIM swapping his customers.
UPS Network Management Card version 4 suffers from a path traversal vulnerability.
Nokia BMC Log Scanner version 13 suffers from a remote command injection vulnerability.
Cybersecurity researchers have discovered a new malware campaign that leverages bogus Google Sites pages and HTML smuggling to distribute a commercial malware called AZORult in order to facilitate information theft. "It uses an unorthodox HTML smuggling technique where the malicious payload is embedded in a separate JSON file hosted on an external website," Netskope Threat Labs