home.social

Search

1000 results for “infosecdj”

  1. RE: infosec.exchange/@ennolenze/11

    Letztes Jahr haben wir 2.600 Geschenke für in die gebracht. Schaffen wir dieses Jahr 100.000? Ab gehts!

  2. RE: infosec.exchange/@josephcox/11

    I’m glad I decided to not renew my subscription at the end of the year and already did the migration away from this shitty company…

  3. RE: infosec.exchange/@josephcox/11

    I am happy with Posteo for my email.

    Email is no secure medium, no matter how many bits you bolt onto the protocol. If you need to communicate confidentially, use Signal, not email.

    German police once demanded the IP addresses of Posteo customers and Posteo did not—could not—deliver because they (intentionally) don't even save IP addresses.

    If you need your own domain (like [email protected] rather than [email protected]), then I recommend Mailbox.org. Posteo doesn't support custom domains. Mailbox costs 300% of Posteo's price though.

    In any case, Proton (via ProtonMail) should not be supported.

  4. RE: infosec.exchange/@lcamtuf/1175

    tech bro = Nazi

    Hacker News commenters want to keep those who would protest their oppression busy with forced labor, "re-educate" them, exterminate those who refuse or who you consider worthless.

    Justify it with "rationalism", only ever considering the economic aspect, never other aspects … like ethics or "doing things for fun".

  5. RE: infosec.exchange/@patrickcmill

    So when are we going to admit that they’re at war with us? Because they seem to think they are.

  6. RE: infosec.exchange/@i0null/11750

    just days ago this number had no special significance to it not every time someone mentions it you'll recall this week

  7. RE: infosec.exchange/@SkypLabs/117

    I'm glad to see my talk finally online! I was afraid the recording got lost due to a technical issue, but they successfully recovered it.

    I hope you'll enjoy it.

  8. RE: infosec.exchange/@imclaren/117

    Finally macbooks can simulate the Linux laptop experience.

  9. RE: infosec.exchange/@lcamtuf/1175

    If you wonder why I black hole the entire site….

  10. RE: infosec.exchange/@raptor/11750

    So, it does sound like PHP's runtime contains some bad structural decisions that are going to be hard to fix. That said... I'm having a hard time convincing myself that last week's fire drill wasn't AI marketing nonsense. Is the vuln actually exploitable in practice, or is this just more noise? Here's a great way to prove it.

  11. RE: infosec.exchange/@flyingpengui

    Yeah, Claude is great for busywork. But in the end, there is a self-correcting reality

  12. Serbia is Europe. To the young people filling the streets of Belgrade, may your hopes become tomorrow’s reality.

    video.infosec.exchange/w/b9i3E

  13. 🚨 EUVD-2026-106268

    📊 Score: 4.2/10 (CVSS v3.1)
    📦 Product: PeopleSoft Enterprise PeopleTools, PeopleSoft Enterprise PeopleTools
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61 and 8.6...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  14. 🚨 EUVD-2026-110823

    📊 Score: 8.4/10 (CVSS v3.1)
    📦 Product: NeMo Agent ToolKit
    🏢 Vendor: NVIDIA
    📅 Updated: 2026-10-27

    📝 NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  15. 🚨 EUVD-2026-110828

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Ontime
    🏢 Vendor: Idvlabs Software and Consulting Services Inc.
    📅 Updated: 2026-10-27

    📝 Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force.

    This issue affects Ontime: through 2026-10-27.
     NOTE: The vendor was c...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  16. 🚨 EUVD-2026-106278

    📊 Score: 4.7/10 (CVSS v3.1)
    📦 Product: PeopleSoft Enterprise PeopleTools
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Difficult to exploit vuln...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  17. 🚨 EUVD-2026-106279

    📊 Score: 2.7/10 (CVSS v3.1)
    📦 Product: Oracle Database Server, Oracle Database Server
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high pri...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  18. 🚨 EUVD-2026-106280

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Oracle Order Management
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabi...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  19. 🚨 EUVD-2026-106281

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Oracle HRMS (Norway)
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  20. 🚨 EUVD-2026-110829

    📊 Score: n/a
    📦 Product: PowerShell Universal
    🏢 Vendor: Devolutions
    📅 Updated: 2026-10-27

    📝 Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbit...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  21. 🚨 EUVD-2026-106821

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Oracle Essbase
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to co...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  22. 🚨 EUVD-2026-106282

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Oracle HRMS (India)
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low pr...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  23. 🚨 EUVD-2026-110830

    📊 Score: 7.5/10 (CVSS v3.1)
    📦 Product: Agentic AI / Agentic Ally
    🏢 Vendor: Keepnet Labs Cybersecurity Inc.
    📅 Updated: 2026-10-27

    📝 Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass.

    This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  24. 🚨 EUVD-2026-106823

    📊 Score: 7.7/10 (CVSS v3.1)
    📦 Product: Oracle Essbase
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

Share on Mastodon

Enter the server where you have an account.