https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-09-06 11:08:302024-09-06 11:08:301Password review: A premium password manager well worth the money
Video and audio of therapy sessions, transcripts, and other patient records were accidentally exposed in a publicly accessible database operated by the virtual medical company Confidant Health.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-09-06 11:08:302024-09-06 11:08:30Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database
Progress Software has alerted users to a critical vulnerability (CVE-2024-7591) in its LoadMaster ADC and load balancer solution. The flaw, with a CVSS score of 10, allows remote attackers to execute system commands without authentication.
A critical vulnerability (CVE-2024-2169) in Webmin/Virtualmin control panels allows for launching DoS attacks. This flaw reveals IP addresses through the UDP service on port 10000, enabling attackers to create a loop of traffic between servers.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-09-06 10:07:152024-09-06 10:07:15Webmin/Virtualmin Vulnerability Opens Door to Loop DoS Attacks
Researchers and the TSA have different views on the impact of vulnerabilities in an airport security application that could allegedly allow the bypass of certain airport security systems.
CVE-2024-20017 is a critical zero-click exploit found in popular Wi-Fi chipsets like MediaTek MT7622/MT7915. The vulnerability allows remote code execution without user interaction, posing a severe risk with a CVSS score of 9.8.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-09-06 09:07:322024-09-06 09:07:32Critical Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published
Cybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts.
The vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1.
“The plugin suffers from an
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-09-06 08:07:352024-09-06 08:07:35Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress
A fake OnlyFans tool circulating among hackers promises to help steal accounts but actually infects them with the Lumma stealer malware, as discovered by Veriti Research.
A new security flaw has been addressed in the Apache OFBiz open-source enterprise resource planning (ERP) system that, if successfully exploited, could lead to unauthenticated remote code execution on Linux and Windows.
The high-severity vulnerability, tracked as CVE-2024-45195 (CVSS score: 7.5), affects all versions of the software before 18.12.16.
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
1Password review: A premium password manager well worth the money
/in General NewsUpgrade your security with 1Password, a premium password manager with useful features.
Latest stories for ZDNET in Security – Read More
Veeam Patches Critical Vulnerabilities in Enterprise Products
/in General NewsVeeam has released patches for critical-severity vulnerabilities in Backup & Replication, ONE, and Service Provider Console.
The post Veeam Patches Critical Vulnerabilities in Enterprise Products appeared first on SecurityWeek.
SecurityWeek – Read More
Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database
/in General NewsVideo and audio of therapy sessions, transcripts, and other patient records were accidentally exposed in a publicly accessible database operated by the virtual medical company Confidant Health.
Security Latest – Read More
Critical Vulnerability Discovered in Progress LoadMaster
/in General NewsProgress Software has alerted users to a critical vulnerability (CVE-2024-7591) in its LoadMaster ADC and load balancer solution. The flaw, with a CVSS score of 10, allows remote attackers to execute system commands without authentication.
Cyware News – Latest Cyber News – Read More
Webmin/Virtualmin Vulnerability Opens Door to Loop DoS Attacks
/in General NewsA critical vulnerability (CVE-2024-2169) in Webmin/Virtualmin control panels allows for launching DoS attacks. This flaw reveals IP addresses through the UDP service on port 10000, enabling attackers to create a loop of traffic between servers.
Cyware News – Latest Cyber News – Read More
CISA Breaks Silence on Controversial ‘Airport Security Bypass’ Vulnerability
/in General NewsResearchers and the TSA have different views on the impact of vulnerabilities in an airport security application that could allegedly allow the bypass of certain airport security systems.
The post CISA Breaks Silence on Controversial ‘Airport Security Bypass’ Vulnerability appeared first on SecurityWeek.
SecurityWeek – Read More
Critical Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published
/in General NewsCVE-2024-20017 is a critical zero-click exploit found in popular Wi-Fi chipsets like MediaTek MT7622/MT7915. The vulnerability allows remote code execution without user interaction, posing a severe risk with a CVSS score of 9.8.
Cyware News – Latest Cyber News – Read More
Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress
/in General NewsCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts.
The vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1.
“The plugin suffers from an
The Hacker News – Read More
Fake OnlyFans Tool Backstabs Cybercriminals, Steals Passwords
/in General NewsA fake OnlyFans tool circulating among hackers promises to help steal accounts but actually infects them with the Lumma stealer malware, as discovered by Veriti Research.
Cyware News – Latest Cyber News – Read More
Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution
/in General NewsA new security flaw has been addressed in the Apache OFBiz open-source enterprise resource planning (ERP) system that, if successfully exploited, could lead to unauthenticated remote code execution on Linux and Windows.
The high-severity vulnerability, tracked as CVE-2024-45195 (CVSS score: 7.5), affects all versions of the software before 18.12.16.
“An attacker with no valid
The Hacker News – Read More