White Papers
Video
Cartoon Contest
Latest Comment: “See? I told you no one understands Linux.”
Current Issue
Flash Poll
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Bug Report
From DHS/US-CERT’s National Vulnerability Database
CVE-2021-20089
PUBLISHED: 2021-04-23
Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) in purl 2.3.2 allows a malicious user to inject properties into Object.prototype.
CVE-2021-29470
PUBLISHED: 2021-04-23
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An att…
CVE-2021-20085
PUBLISHED: 2021-04-23
Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype.
CVE-2021-20086
PUBLISHED: 2021-04-23
Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype.
CVE-2021-20083
PUBLISHED: 2021-04-23
Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) in jquery-plugin-query-object 2.2.3 allows a malicious user to inject properties into Object.prototype.
The post Insider Data Leaks: A Growing Enterprise Threat appeared first on Malware Devil.
https://malwaredevil.com/2021/04/23/insider-data-leaks-a-growing-enterprise-threat/?utm_source=rss&utm_medium=rss&utm_campaign=insider-data-leaks-a-growing-enterprise-threat
No comments:
Post a Comment