One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables.
The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
About this summary. This is a short excerpt from the description that SANS Internet Storm Center published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://isc.sans.edu/diary/rss/33488
Source attribution: headline and facts are from SANS Internet Storm Center (isc.sans.edu). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S.
Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
A new bipartisan House bill would charge the federal government with developing formal guidance for defending AI models against distillation attacks. The AI Cyber…
Localizing compliance at scale: achieving South Korea’s ISMS certification
For ten days, auditors appointed by the Korea Internet & Security Agency (KISA) sat together with us and worked through 80 controls. That is what it took for a company…
Your AI Agent Doesn’t Have MFA
Every Cybersecurity Awareness Month campaign rests on four habits: Strong passwords, Multifactor authentication, Spotting phishing, and keeping software updated. All…
Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)
This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too…
Senate Bill Seeks to Expand Use of AI Technologies in Healthcare and Reimburse for Adoption
A legislative discussion draft has been introduced in the Senate that seeks input from industry stakeholders, clinicians, and policy experts on expanding the use of AI…