Condividi

RSS

Piu’ articoli…

• Da Secure Online Desktop a Cyberfero: il rebranding dell’azienda leader nella cybersecurity
• NIS2 – Come il nuovo regolamento cyber potenzia la sicurezza dell’Europa
• Advanced persistent threat (APT): cosa sono e come difendersi
• Penetration Testing e MFA: Una Strategia Duplice per Massimizzare la Sicurezza
• SOAR e l’automazione della sicurezza informatica
• Penetration Testing: Dove Colpire per Proteggere la Tua Rete Informatica
• Ransomware: una piaga che mette in ginocchio aziende e istituzioni. Pagare o non pagare? Ecco la risposta.
• Perché l’audit IT e il log management sono importanti per la Cybersecurity

Categorie …

• Backup as a Service (25)
  • Acronis Cloud Backup (18)
  • Veeam Cloud Connect (3)
• Cloud CRM (1)
• Cloud Server/VPS (23)
• Conferenza Cloud (4)
• Cyberfero (15)
• Log Management (2)
• Monitoraggio ICT (4)
• Novita' (21)
• ownCloud (7)
• Privacy (8)
• Security (215)
  • Cyber Threat Intelligence (CTI) (9)
  • Deception (4)
  • Ethical Phishing (10)
  • Netwrix Auditor (2)
  • Penetration Test (18)
  • Posture Guard (4)
  • SOCaaS (66)
    • EDR (6)
    • SIEM (12)
    • SOAR (5)
    • UEBA (9)
  • Vulnerabilita' (83)
• Web Hosting (16)

Tags

Feed sconosciuto

Feed sconosciuto

Full Disclosure

• OpenBSD mpls_do_error: Remote Kernel Stack Disclosure via MPLS Label Stack Over-read 21 Giugno 2026
  Posted by shj on Jun 20------------------------------------------------------------------------ OpenBSD mpls_do_error: Remote Kernel Stack Disclosure via MPLS Label Stack Over-read ------------------------------------------------------------------------ Affected:  OpenBSD -current prior to 2026-06-18 (fixed in -current) Vendor:    OpenBSD Severity:  Medium Reporter:  Argus Systems Date:      2026-06-12 CVE:       CVE-2026-56099 1. SUMMARY ========== The...
• OpenBSD sppp_pap_input: PAP authentication bypass 21 Giugno 2026
  Posted by shj on Jun 20------------------------------------------------------------------------ OpenBSD sppp_pap_input: PAP Authentication Bypass via Zero-Length bcmp ------------------------------------------------------------------------ Affected:  OpenBSD all versions through 7.6 (fixed in -current) Vendor:    OpenBSD Severity:  High Reporter:  Argus Date:      2026-06-16 1. SUMMARY ========== The sppp_pap_input() function in sys/net/if_spppsubr.c uses...
• SEC Consult SA-20260618-0 :: Hardcoded Root Cloud Credentials in Application Binaries in Silver Leaf Technologies - Worksnaps.net Worksnaps 21 Giugno 2026
  Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20SEC Consult Vulnerability Lab Security Advisory < 20260618-0 > ======================================================================= title: Hardcoded Root Cloud Credentials in Application Binaries product: Silver Leaf Technologies - Worksnaps.net Worksnaps vulnerable version:
• SEC Consult SA-20260617-1 :: Multiple Vulnerabilities in Quanos Content Solutions - SCHEMA ST4 21 Giugno 2026
  Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20SEC Consult Vulnerability Lab Security Advisory < 20260617-1 > ======================================================================= title: Multiple Vulnerabilities             product: Quanos Content Solutions - SCHEMA ST4  vulnerable version: All versions of SCHEMA ST4 on-premises     fixed version: Not applicable, see workaround section for mitigation. […]
• SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3 21 Giugno 2026
  Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20SEC Consult Vulnerability Lab Security Advisory < 20260617-0 > ======================================================================= title: Multiple Critical Vulnerabilities product: Sprecher Automation SPRECON-E-C/-E-P/-E-T3  vulnerable version: See vulnerable versions below fixed version: See solution section below          CVE number: CVE-2022-4333, CVE-2022-4332, CVE-2025-41741,        ...
• SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225 21 Giugno 2026
  Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20SEC Consult Vulnerability Lab Security Advisory < 20260616-0 > ======================================================================= title: Broken Access Control             product: syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket  vulnerable version: 3.4.0.x       fixed version: 3.5.0.0 CVE number: CVE-2026-12225 […]
• APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211 21 Giugno 2026
  Posted by Apple Product Security via Fulldisclosure on Jun 20APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211 Beats Firmware Update 1B211 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/127557. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Bluetooth Available for: Beats Studio Buds Impact: […]
• PHP 8.5.7 `levenshtein()` signed-integer overflow 21 Giugno 2026
  Posted by Khashayar Fereidani on Jun 20# PHP 8.5.7 `levenshtein()` signed-integer overflow **Author:** Khashayar Fereidani **Disclosure Date:** 2026-06-18 **Advisory:** https://fereidani.com/php-857-levenshtein-signed-integer-overflow **Contact:** https://fereidani.com/contact ## Description The `levenshtein()` function calculates the Levenshtein distance between two strings, optionally accepting custom costs for insertion, replacement, and deletion operations. In PHP 8.5.7, the...
• PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow 21 Giugno 2026
  Posted by Khashayar Fereidani on Jun 20# PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow **Author:** Khashayar Fereidani **Disclosure Date:** 2026-06-18 **Advisory:** https://fereidani.com/php-857-domxmlserializationalgorithm-stack-overflow **Contact:** https://fereidani.com/contact ## Description The `dom_xml_serialization_algorithm()` and `dom_xml_serialize_element_node()` functions in `ext/dom/xml_serializer.c` rely on unbounded recursion to serialize XML nodes....
• PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow 21 Giugno 2026
  Posted by Khashayar Fereidani on Jun 20# PHP 8.5.7 `mb_substr()` &apos;SJIS-mac&apos; size_t underflow **Author:** Khashayar Fereidani **Disclosure Date:** 2026-06-18 **Advisory:** https://fereidani.com/php-857-mbsubstr-sjis-mac-sizet-underflow **Contact:** https://fereidani.com/contact ## Description The `mb_get_substr()` function in `ext/mbstring/mbstring.c` deliberately skips an early empty return guard for the `SJIS-mac` encoding when `from >= in_len`. As a result, it falls...