Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-1809PUBLISHED: 2022-05-21Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.
CVE-2022-31267PUBLISHED: 2022-05-21Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.
CVE-2022-31268PUBLISHED: 2022-05-21A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).
CVE-2022-31264PUBLISHED: 2022-05-21Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.
CVE-2022-31259PUBLISHED: 2022-05-21The route lookup process in beego through 1.12.4 and 2.x through 2.0.2 allows attackers to bypass access control. When a /p1/p2/:name route is configured, attackers can access it by appending .xml in various places (e.g., p1.xml instead of p1).
User Rank: Ninja
1/19/2015 | 1:55:38 PM
Sony hack could be a blueprint for terrorism in the cyber domain.
@Mike I do agree. Sony's ineptness has opened a whole new world of possibilities. Instead of panic, actual leadership skills were needed and those at the top of Sony's Film Division came up short.
It really is discouraging to see individuals ( Sony Entertainment Management ) who earn a considerable amount of money show they are not worth it. Of course Sony is not alone - but they certainy subscribe to the philoshpy that " you don't have to really know what you are doing to be paid well". The top management at Sony are prime examples of the "corporate disconnect" that has been fostered for the past two decades(at least).
So now Sony becomes a text book case for many things, just add "What not to do with cyber blackmail" to it.
Just don't tell Sony - they will want licensing and residuals from it.