White Papers
Video
Latest Comment: Hey Jeff, any ideas where our WordPress site’s breadcrumbs disappeared?
Current Issue
2021 Top Enterprise IT TrendsWe’ve identified the key trends that are poised to impact the IT landscape in 2021. Find out why they’re important and how they will affect you today!Flash Poll
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Bug Report
From DHS/US-CERT’s National Vulnerability Database
CVE-2021-22538
PUBLISHED: 2021-03-31
A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0.23.1), allows an attacker who (1) has UserWrite permissions and (2) is using a carefully crafted request or malicious proxy, to create another user with higher privileges than the…
CVE-2021-26943
PUBLISHED: 2021-03-31
The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).
CVE-2021-29663
PUBLISHED: 2021-03-31
CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS). When an attacker with access to an Admin account creates a Job Title in the Site area (aka the admin/add_jobs.php name parameter), they can insert an XSS payload. This payload will execute whenever an…
CVE-2020-35308
PUBLISHED: 2021-03-31
CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code.
CVE-2021-29662
PUBLISHED: 2021-03-31
The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
The post Google Updates on Campaign Targeting Security Researchers appeared first on Malware Devil.
https://malwaredevil.com/2021/03/31/google-updates-on-campaign-targeting-security-researchers/?utm_source=rss&utm_medium=rss&utm_campaign=google-updates-on-campaign-targeting-security-researchers
No comments:
Post a Comment