Due to insecure fallback behavior, a man-in-the-middle attacker can bypass NNE’s protection against man-in-the-middle attacks and hijack authenticated connections. In some configurations, a full man-in-the-middle attack is possible. Oracle Database…
>> ARCHIVE: 2021-12
Backdoor.Win32.Phase.11 malware suffers from a code execution vulnerability.
NNE’s integrity protection mechanism deliberately weakens the key used for computing per-packet message authentication codes (MACs). Oracle Database versions 19c, 12.2.0.1, and 12.1.0.2 are affected.
Microsoft Internet Explorer / ActiveX Control – Security Bypass
WordPress Plugin Typebot 1.4.3 – Stored Cross Site Scripting (XSS) (Authenticated)
Apache Log4j 2 – Remote Code Execution (RCE)
Laravel Valet 2.0.3 – Local Privilege Escalation (macOS)
Apache Log4j2 2.14.1 – Information Disclosure
WebHMI 4.0 – Remote Code Execution (RCE) (Authenticated)