Aggregator
CVE-2022-46545 | Tenda F1203 2.0.1.6 /goform/NatStaticSetting page buffer overflow
CVE-2022-46546 | Tenda F1203 2.0.1.6 /goform/RouteStatic entrys buffer overflow
CVE-2022-46547 | Tenda F1203 2.0.1.6 /goform/VirtualSer page buffer overflow
CVE-2022-46548 | Tenda F1203 2.0.1.6 /goform/DhcpListClient page buffer overflow
BSidesLV24 – Common Ground – 101 Things Your Application is Doing Without Your Knowledge
Author/Presenter: Mike Larkin
Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.
The post BSidesLV24 – Common Ground – 101 Things Your Application is Doing Without Your Knowledge appeared first on Security Boulevard.
Apple security advisory (AV25-218)
CVE-2024-24035 | Setor Informatica SIL 3.1 hmessage cross site scripting
CVE-2024-2000 | Premium Addons Pro Plugin up to 2.9.12 on WordPress Multi Scroll Widget cross site scripting
CVE-2024-1997 | Premium Addons Pro Plugin up to 2.9.12 on WordPress Messenger Chat Widget cross site scripting
CVE-2024-2237 | Premium Addons Pro Plugin up to 2.9.12 on WordPress Global Badge Module cross site scripting
CVE-2024-2316 | Bdtask Hospital AutoManager up to 20240227 Update Bill Page /billing/bill/edit/ cross-site request forgery
CVE-2023-34980 | QNAP QTS/QuTS hero os command injection (qsa-24-12)
Researchers Deanonymized Medusa Ransomware Group’s Onion Site
Researchers have uncovered the true identity of servers hosting one of the most notorious ransomware operations active today. The Medusa Ransomware Group, which has operated with relative anonymity through Tor hidden services, has had its cover blown through a sophisticated exploitation of vulnerabilities in their own infrastructure. This exposure represents a rare instance where cybercriminal […]
The post Researchers Deanonymized Medusa Ransomware Group’s Onion Site appeared first on Cyber Security News.
Jira Down – Atlassian Jira Outage Disrupts Dashboard Access for Users Globally
Atlassian, the company behind Jira, a leading project management and issue-tracking platform, is grappling with a significant service disruption that has left users unable to load certain Dashboard widgets. The outage, affecting Jira Work Management, Jira Service Management, and Jira Product Discovery, began on April 16, 2025, and has caused widespread frustration among teams relying […]
The post Jira Down – Atlassian Jira Outage Disrupts Dashboard Access for Users Globally appeared first on Cyber Security News.
CVE-2013-0722 | Ettercap up to 0.7.5.1 ec_scan.c scan_load_hosts memory corruption (EDB-23945 / Nessus ID 64399)
Interlock Ransomware Employs Multi-Stage Attack Via Legitimate Websites to Deliver Malicious Browser Updates
Cybersecurity experts have identified a sophisticated ransomware threat known as Interlock, which has been quietly expanding its operations since its first appearance in September 2024. This malware employs an elaborate multi-stage attack chain, beginning with the compromise of legitimate websites that deliver fake browser updates to unsuspecting users. Companies impacted by Interlock span various sectors […]
The post Interlock Ransomware Employs Multi-Stage Attack Via Legitimate Websites to Deliver Malicious Browser Updates appeared first on Cyber Security News.