20Mar
Apex Legends Global Series plagued by hackers
The North American finals of the Apex Legends Global have been postponed after at least two hacking incidents.
20Mar
Some questions on Yubikey, FIDO2, and passkeys
From the documentation of Yubikey and passkeys, I got the impression that the passkey implementation is based on FIDO2, because they say the limit is 25 keys:
Currently, YubiKeys can store a maximum of 25 passkeys.
FIDO2 – the YubiKey 5 c…
20Mar
How vulnerable is my Veracrypt-protected data to key logging attack via Windows?
Objective
I’ve come into possession of some data that I’d like to protect. If an attacker destroys or corrupts my data, I can tolerate that; Plenty of backups exist. But I can’t tolerate an outsider reading the data.
My hypothetical attack…
20Mar
CVE-2024-2336 | Popup Maker Plugin up to 1.18.2 on WordPress cross site scripting
A vulnerability was found in Popup Maker Plugin up to 1.18.2 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2024-23…
20Mar
CVE-2024-28868 | Umbraco CMS prior 10.8.5 observable response discrepancy
A vulnerability has been found in Umbraco CMS and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to observable response discrepancy.
This vulnerability is known as CVE-2024-28868. The atta…
20Mar
CVE-2024-29018 | docker DNS Request resource transfer
A vulnerability, which was classified as problematic, was found in docker. Affected is an unknown function of the component DNS Request Handler. The manipulation leads to incorrect resource transfer.
This vulnerability is traded as CVE-2024-29018. It …
20Mar
CVE-2024-29033 | oauthenticator prior 16.3.0 GoogleOAuthenticator.hosted_domain improper authorization
A vulnerability, which was classified as critical, has been found in oauthenticator. This issue affects the function GoogleOAuthenticator.hosted_domain. The manipulation leads to improper authorization.
The identification of this vulnerability is CVE-…
20Mar
CVE-2024-27105 | Frappe up to 14.66.2/15.15.x authorization
A vulnerability classified as critical was found in Frappe up to 14.66.2/15.15.x. This vulnerability affects unknown code. The manipulation leads to incorrect authorization.
This vulnerability was named CVE-2024-27105. The attack can be initiated remo…
20Mar
CVE-2024-24813 | Frappe up to 14.63.x Whitelist sql injection
A vulnerability classified as critical has been found in Frappe up to 14.63.x. This affects an unknown part of the component Whitelist Handler. The manipulation leads to sql injection.
This vulnerability is uniquely identified as CVE-2024-24813. It is…
20Mar
CVE-2022-4963 | Folio Spring Module Core up to 1.1.5 Schema Name HibernateSchemaService.java dropSchema sql injection (FOLIO-3645)
A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue is the function dropSchema of the file tenant/src/main/java/org/folio/spring/tenant/hibernate/HibernateSchemaService.java of the co…
