Difference between revisions of "Template:PSW652NewsPaulAsadoorian"

From Security Weekly Wiki
Jump to navigationJump to search
(Added By Paul's Craptastic PPWorks Code)
 
(Added With Paul's Craptastic Python Script)
Line 1: Line 1:
 
===Articles===
 
===Articles===
 +
#[https://www.exploit-db.com/exploits/48472 vBulletin 5.6.1 - 'nodeId' SQL Injection]
 +
#[https://www.exploit-db.com/exploits/48481 Online Healthcare Patient Record Management System 1.0 - Authentication Bypass]
 +
#[https://www.exploit-db.com/exploits/48491 Pi-Hole - heisenbergCompensator Blocklist OS Command Execution (Metasploit)]
 +
#[https://blog.rootshell.be/2020/05/21/sans-isc-malware-triage-with-floss-api-calls-based-behavior/ [SANS ISC] Malware Triage with FLOSS: API Calls Based Behavior | /dev/random]
 +
#[https://www.zdnet.com/article/hackers-target-the-air-gapped-networks-of-the-taiwanese-and-philippine-military/ Hackers target the air-gapped networks of the Taiwanese and Philippine military | ZDNet]
 +
#[https://securityaffairs.co/wordpress/103369/breaking-news/wp-product-review-lite-xss.html Stored XSS in WP Product Review Lite plugin allows for automated takeovers]
 +
#[https://www.securityweek.com/mandrake-android-spyware-remained-undetected-4-years 'Mandrake' Android Spyware Remained Undetected for 4 Years | SecurityWeek.Com]
 +
#[https://www.darkreading.com/vulnerabilities---threats/the-3-top-cybersecurity-myths-and-what-you-should-know/a/d-id/1337806 The 3 Top Cybersecurity Myths & What You Should Know]
 +
#[https://www.securityweek.com/bluetooth-vulnerability-allows-attackers-impersonate-previously-paired-devices Bluetooth Vulnerability Allows Attackers to Impersonate Previously Paired Devices | SecurityWeek.Com]
 +
#[https://security.googleblog.com/2020/05/enhanced-safe-browsing-protection-now.html Enhanced Safe Browsing Protection now available in Chrome]
 +
#[https://www.helpnetsecurity.com/2020/05/20/easyjet-data-breach-9-million-customers-affected/ EasyJet data breach: 9 million customers affected - Help Net Security]
 +
#[https://www.helpnetsecurity.com/2020/05/20/qmail-rce/ Vulnerability in Qmail mail transport agent allows RCE - Help Net Security]
 +
#[https://www.securityweek.com/remote-code-execution-vulnerability-patched-vmware-cloud-director Remote Code Execution Vulnerability Patched in VMware Cloud Director | SecurityWeek.Com]
 +
#[https://securityaffairs.co/wordpress/103517/cyber-warfare-2/israel-cyberattack-iranian-port.html Israel is suspected to be behind the cyberattack on Iranian port]
 +
#[https://www.securityweek.com/vulnerabilities-exposed-hundreds-thousands-qnap-nas-devices-attacks Vulnerabilities Exposed Hundreds of Thousands of QNAP NAS Devices to Attacks | SecurityWeek.Com]
 +
#[https://www.us-cert.gov/ncas/current-activity/2020/05/20/isc-releases-security-advisory-bind ISC Releases Security Advisory for BIND | CISA]
 +
#[https://medium.com/@stestagg/stealing-secrets-from-developers-using-websockets-254f98d577a0 Stealing Secrets from Developers using Websockets]
 +
#[https://nakedsecurity.sophos.com/2020/05/21/chrome-83-adds-dns-over-https-support-and-privacy-tweaks/ Chrome 83 adds DNS-over-HTTPS support and privacy tweaks]
 +
#[https://www.helpnetsecurity.com/2020/05/21/signal-pins/ Signal fixes location-revealing flaw, introduces Signal PINs - Help Net Security]
 +
#[https://www.securityweek.com/xss-open-redirect-vulnerabilities-patched-drupal XSS, Open Redirect Vulnerabilities Patched in Drupal | SecurityWeek.Com]
 +
#[https://www.darkreading.com/risk/the-need-for-compliance-in-a-post-covid-19-world/a/d-id/1337840 The Need for Compliance in a Post-COVID-19 World]
 +
#[https://www.securityweek.com/zoom-provide-detailed-info-upcoming-end-end-encryption-feature Zoom to Provide Detailed Info on Upcoming End-to-End Encryption Feature | SecurityWeek.Com]
 +
#[https://www.mediapost.com/publications/article/351605/google-begins-encrypting-domain-name-lookups.html Google Begins Encrypting Domain Name Lookups]
 +
#[https://www.theverge.com/2020/5/18/21262103/microsoft-open-source-linux-history-wrong-statement Microsoft: we were wrong about open source]
 +
#[https://mashable.com/video/pandemic-kick-balls-dont-touch/ Official reminds public to avoid touching other people's balls as crowd giggles]

Revision as of 20:48, 21 May 2020

Articles

  1. vBulletin 5.6.1 - 'nodeId' SQL Injection
  2. Online Healthcare Patient Record Management System 1.0 - Authentication Bypass
  3. Pi-Hole - heisenbergCompensator Blocklist OS Command Execution (Metasploit)
  4. [SANS ISC Malware Triage with FLOSS: API Calls Based Behavior | /dev/random]
  5. Hackers target the air-gapped networks of the Taiwanese and Philippine military | ZDNet
  6. Stored XSS in WP Product Review Lite plugin allows for automated takeovers
  7. 'Mandrake' Android Spyware Remained Undetected for 4 Years | SecurityWeek.Com
  8. The 3 Top Cybersecurity Myths & What You Should Know
  9. Bluetooth Vulnerability Allows Attackers to Impersonate Previously Paired Devices | SecurityWeek.Com
  10. Enhanced Safe Browsing Protection now available in Chrome
  11. EasyJet data breach: 9 million customers affected - Help Net Security
  12. Vulnerability in Qmail mail transport agent allows RCE - Help Net Security
  13. Remote Code Execution Vulnerability Patched in VMware Cloud Director | SecurityWeek.Com
  14. Israel is suspected to be behind the cyberattack on Iranian port
  15. Vulnerabilities Exposed Hundreds of Thousands of QNAP NAS Devices to Attacks | SecurityWeek.Com
  16. ISC Releases Security Advisory for BIND | CISA
  17. Stealing Secrets from Developers using Websockets
  18. Chrome 83 adds DNS-over-HTTPS support and privacy tweaks
  19. Signal fixes location-revealing flaw, introduces Signal PINs - Help Net Security
  20. XSS, Open Redirect Vulnerabilities Patched in Drupal | SecurityWeek.Com
  21. The Need for Compliance in a Post-COVID-19 World
  22. Zoom to Provide Detailed Info on Upcoming End-to-End Encryption Feature | SecurityWeek.Com
  23. Google Begins Encrypting Domain Name Lookups
  24. Microsoft: we were wrong about open source
  25. Official reminds public to avoid touching other people's balls as crowd giggles