Cyber Newsroom Feed
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
- seclists.org
CVE-2024-33327
Full Disclosure mailing list archives From: Rodolfo Tavares via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 9 Jul 2024 16:57:54 -0300 =====[ Tempest Security Intelligence - ADV-6/2024 ] ... Read more
- seclists.org
CVE-2024-33328
Full Disclosure mailing list archives From: Rodolfo Tavares via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 9 Jul 2024 16:56:39 -0300 =====[ Tempest Security Intelligence - ADV-6/2024 ] ... Read more
- seclists.org
CVE-2024-33329
Full Disclosure mailing list archives From: Rodolfo Tavares via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 9 Jul 2024 16:54:20 -0300 =====[ Tempest Security Intelligence - ADV-6/2024 ] ... Read more
- cert.pl
Vulnerabilities in Phoniebox open-source project
CVE ID CVE-2024-3798 Publication date 10 July 2024 Vendor Phoniebox Product Phoniebox Vulnerable versions All through 2.7 Vulnerability type (CWE) Cross-Site Request Forgery (CSRF) (CWE-352) Report so ... Read more
- krebsonsecurity.com
Microsoft Patch Tuesday, July 2024 Edition
Microsoft Corp. today issued software updates to plug at least 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least two ... Read more
- huntress.com
SlashAndGrab: The ConnectWise ScreenConnect Vulnerability Explained | Huntress
The “exploit” is trivial and embarrassingly easy. These are words you never want to hear when talking about vulnerabilities in a widely used product, but that’s exactly how John Hammond, Principal Se ... Read more
- Zero Day Initiative
The July 2024 Security Update Review
None ... Read more
- cert.pl
SQL Injection vulnerability in MegaBIP software
CVE ID CVE-2024-6527 Publication date 09 July 2024 Vendor Jan Syski Product MegaBIP Vulnerable versions All through 5.13 Vulnerability type (CWE) Improper Neutralization of Special Elements used in an ... Read more
- The Cloudflare Blog
RADIUS/UDP vulnerable to improved MD5 collision attack
2024-07-0917 min readThe MD5 cryptographic hash function was first broken in 2004, when researchers demonstrated the first MD5 collision, namely two different messages X1 and X2 where MD5(X1) = MD5 (X ... Read more
- cert.pl
Vulnerabilities in Longse Technology devices
CVE ID CVE-2024-5631 Publication date 09 July 2024 Vendor Longse Technology Product NVR3608PGE2W Vulnerable versions All Vulnerability type (CWE) Cleartext Transmission of Sensitive Information (CWE-3 ... Read more