Vulnerabilities (Page 17)

Cyber Security Vulnerabilities | Infosec Vulnerabilities | Information Security Vulnerabilities | Bug bounty

These three critical vulnerabilities in NumPy, an important Python library, affect your web applications?

On: March 24, 2022

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, NumPy, Python, security flaws, technology, vulnerability

Cybersecurity specialists report the detection of some critical vulnerabilities in NumPy, a library for the Python programming language with support for creating vectors and multidimensional arrays, along with a largeRead More →

SQL injection vulnerability in Mail Manager Component would allow authenticated attackers to execute code in Sophos UTM

On: March 24, 2022

In: Vulnerabilities

Tagged: antivirus, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Firewall, Hacking, incidents, Information Security, security flaws, sophos, SQL injections, Universal Threat Manager (UTM), vulnerability

Sophos security teams announced the fix of a critical vulnerability in authentication software running on Universal Threat Manager (UTM) devices. The vulnerability was described as a SQL injection bug inRead More →

Email data of Russia-based Transneft, the largest oil pipeline company in the world, was hacked and leaked

On: March 22, 2022

In: Vulnerabilities

Tagged: Anonymous, Cyberattack, cybercrime, cybersecurity, cyberwarfare, Distributed Denial of Secrets (DDoSecrets), hackers, Hacking, hacktivism, incidents, Information Security, Russia, security flaws, Transneft, Ukraine, Vladimir Putin

Hacking groups keep playing a key role in the conflict between Ukraine and Russia almost a month after the start of the military invasion ordered by the government of VladimirRead More →

Severe remote code execution vulnerability in Node.js library: Update immediately

On: March 16, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, GitHub, Hacking, incident, incidents, Information Security, MongoDb, Node.js, Parse Server, PostgreSQL, remote code execution (RCE), vulnerability

Cybersecurity specialists recommend users of Parse Server, a popular API server module for Node/Express, immediately apply a fix for a newly detected remote code execution (RCE) vulnerability. Identified by securityRead More →

Important security bypassing vulnerability patched in cURL. Update now

On: March 15, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), cURL, Cyberattack, cybercrime, cybersecurity, hackers, Hacking, incidents, Information Security, technology, vulnerability

Cybersecurity specialists report the detection of a severe vulnerabilities in cURL, a software project consisting of a library and a command interpreter oriented to file transfer. According to the report,Read More →

Critical vulnerabilities in Veeam backup solutions; update immediately

On: March 14, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, Information Security, remote code execution (RCE), security flaws, security risks, technology, Veeam, vulnerability

This weekend, technology firm Veeam announced the release of some security patches to address two critical vulnerabilities in Backup & Replication, a backup solution for virtual environments. This application providesRead More →

CVE-2022-26143: Critical vulnerability in Mitel MiCollab and MiVoice Business Express systems enables a new level of DDoS attacks

On: March 9, 2022

In: Vulnerabilities

Tagged: Akamai, Cloudflare, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, Information Security, Shadowserver Foundation, Team Cymru, vulnerability

A team made up of multiple cybersecurity firms published a report related to the detection of denial of service (DoS) attacks with an amplification rate of more than 4 billionRead More →

AutoWrap vulnerability in Azure Automation Service allows anybody to take over your account

On: March 8, 2022

In: Vulnerabilities

Tagged: Azure Sandbox, Cyberattack, cybercrime, cybersecurity, hackers, Hacking, incidents, Information Security, Microsoft, Microsoft Azure, privilege escalation, security flaws, tokens

In its latest security alert, Microsoft reports a bug in its Azure cloud platform that allowed users full access to other users’ accounts. The flaw, dubbed as “AutoWarp”, was reportedRead More →

Critical local privilege escalation vulnerability affects millions of Linux devices. Published operating code

On: March 8, 2022

In: Vulnerabilities

Tagged: Android, Cyberattack, cybercrime, cybersecurity, Dirty Pipe, Google, Hacking, incidents, Information Security, Linux, Linux Distros, Linux Kernel, Mobile Security, privilege escalation, security flaws

Cybersecurity specialists report the detection of a critical privilege escalation vulnerability in version 5.8 of the Linux kernel. Tracked as CVE-2022-0847 and nicknamed Dirty Pipe, the vulnerability was introduced inRead More →