Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-25878PUBLISHED: 2022-05-27
The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Object.prototype.
This vulnerability can occur in multiple ways:
1. by providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption ...
CVE-2021-27780PUBLISHED: 2022-05-27The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
CVE-2021-27781PUBLISHED: 2022-05-27The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
CVE-2022-1897PUBLISHED: 2022-05-27Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-20666PUBLISHED: 2022-05-27
Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
These vulnerabilities are due to insufficient va...
User Rank: Ninja
1/19/2015 | 1:55:38 PM
Sony hack could be a blueprint for terrorism in the cyber domain.
@Mike I do agree. Sony's ineptness has opened a whole new world of possibilities. Instead of panic, actual leadership skills were needed and those at the top of Sony's Film Division came up short.
It really is discouraging to see individuals ( Sony Entertainment Management ) who earn a considerable amount of money show they are not worth it. Of course Sony is not alone - but they certainy subscribe to the philoshpy that " you don't have to really know what you are doing to be paid well". The top management at Sony are prime examples of the "corporate disconnect" that has been fostered for the past two decades(at least).
So now Sony becomes a text book case for many things, just add "What not to do with cyber blackmail" to it.
Just don't tell Sony - they will want licensing and residuals from it.