Search: “code of conduct”

3 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1071 Vulnerability 953 Ransomware 803 Exploit / PoC 459 Threat actor 417 Data breach 332 Phishing & fraud 209 Policy & legal 178 Industry 82 AI safety & security 64 Advisory 31 Research 30 AI tools & infra 18 Tools 9

SeverityAll critical 1732 high 1617 medium 952 low 286 info 97

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

Cisco fixed a stored cross-site scripting flaw in Industrial Ethernet 1000 series switches exploitable by authenticated remote users.

Insufficient validation of user-supplied input in the web-based management interface of Cisco Industrial Ethernet 1000 Series Switches allows stored XSS. An authenticated remote attacker can inject malicious code into specific interface pages and execute arbitrary script in another user's context. Exploitation requires valid credentials; Cisco has released software updates.

Cisco Security AdvisoriesAug 19, 16:00 UTC · 28d agoAdvisory

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

Cisco patched a reflected XSS in the ISE management interface allowing unauthenticated attackers to execute script via crafted links.

A reflected cross-site scripting vulnerability in the web-based management interface of Cisco Identity Services Engine lets an unauthenticated remote attacker execute arbitrary script in the context of the interface. Exploitation requires persuading a user to click a crafted link due to improper input validation. Cisco has released software updates.

Cisco Security Advisories16:00 UTC · 6h agoAdvisory 15 sources

The NSA Warns of TLS Inspection

Schneier on SecurityNov 22, 06:16 UTC · Nov 22, 2019Advisory