Aggregator

CVE-2021-34481 | Microsoft Windows Print Spooler Service privilege escalation

Vuldb Updates
5 months 3 weeks ago
A vulnerability was found in Microsoft Windows. It has been classified as very critical. This affects an unknown part of the component Print Spooler Service. The manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2021-34481. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to change the configuration settings.
vuldb.com

CVE-2019-11358 | Oracle Financial Services Loan Loss Forecasting up to 8.0.7 Apache httpd cross site scripting (EDB-52141 / Nessus ID 208606)

Vuldb Updates
5 months 3 weeks ago
A vulnerability was found in Oracle Financial Services Loan Loss Forecasting and Provisioning up to 8.0.7. It has been classified as critical. This affects an unknown part of the component Apache httpd. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2019-11358. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

North Korean Hackers as Recruiters Attacking Developers With 35 New Malicious npm Packages

Cyber Security News
5 months 3 weeks ago

North Korean threat actors have launched a sophisticated supply chain attack campaign, embedding 35 malicious npm packages across 24 compromised accounts to target software developers through an elaborate recruitment deception. The campaign, identified as an extension of the ongoing “Contagious Interview” operation, represents a significant escalation in state-sponsored cyber espionage tactics targeting the open-source software […]

The post North Korean Hackers as Recruiters Attacking Developers With 35 New Malicious npm Packages appeared first on Cyber Security News.

Tushar Subhra Dutta

INC

Dark Feed IO
5 months 3 weeks ago

You must login to view this content

cohenido

CVE-2007-3182 | Calendarix cal_footer.inc.php leftfooter cross site scripting (EDB-30232 / XFDB-35045)

Vuldb Updates
5 months 3 weeks ago
A vulnerability was found in Calendarix. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file cal_footer.inc.php. The manipulation of the argument leftfooter leads to basic cross site scripting. This vulnerability is known as CVE-2007-3182. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad