Security
Headlines
HeadlinesLatestCVEs

Tag

#ios

ESET Antivirus: Advanced Protection Solutions for Home Users and Businesses

It's no secret that antivirus software is as essential to your computer as a power cord. However, the threats don't stop at your devices. For example, criminals trying to steal your data can attack your Wi-Fi router, and phishing attempts can target your email.  ESET's latest consumer product release takes a comprehensive approach to security to guard against a full range of threats. All are

The Hacker News
#ios#android#mac#windows#google#git#intel#auth#zero_day#wifi#The Hacker News
GHSA-vp35-85q5-9f25: Container build can leak any path on the host into the container

### Description Moby is the open source Linux container runtime and set of components used to build a variety of downstream container runtimes, including Docker CE, Mirantis Container Runtime (formerly Docker EE), and Docker Desktop. Moby allows for building container images using a set of build instructions (usually named and referred to as a "Dockerfile"), and a build context, which is not unlike the CWD in which the Dockerfile instructions are executed. Containers may be built using a variety of tools and build backends available in the Moby ecosystem; in all cases, builds may not include files outside of the build context (such as using absolute or relative-parent paths). This is enforced through both checks in the build backends, and the containerization of the build process itself. Versions of Git where CVE-2022-39253 is present and exploited by a malicious repository, when used in combination with Moby, are subject to an unexpected inclusion of arbitrary filesystem paths in t...

Cyberwar and Cybercrime Go Hand in Hand

The line between criminal and political aims has become blurred, but motivations matter less than the effects of a breach.

CVE-2022-43119: POC/Create Clansphere 2011.4 "username" xss.md at main · sinemsahn/POC

A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter.

Twitter’s Unpredictable Path Under Elon Musk

By Habiba Rashid Hints of the impending doom that was inevitable with Elon Musk’s $44 billion acquisition of Twitter began to… This is a post from HackRead.com Read the original post: Twitter’s Unpredictable Path Under Elon Musk

OnePlanet Announces Support for Polygon-based Launchpad Services

By Deeba Ahmed This connectivity between the NFT launchpad and the Polygon ecosystem will allow the minting of new collections on the Polygon network. This is a post from HackRead.com Read the original post: OnePlanet Announces Support for Polygon-based Launchpad Services

CVE-2022-40206: wpForo Forum

Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.

CVE-2022-44312: Multiple Heap Buffer Overflows in PicoC at Various Locations (#48) · Issues · Zik Saleeba / picoc · GitLab

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator.