EventSchneier on Security
Workshop on Economics and Information Security (WEIS) Archive
Teaser from the source
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Schneier on SecurityMore on Information
Other advisories
- Not ratedosv:CLEANSTART-2022-OJ20825LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information dis...
- Not ratedosv:CLEANSTART-2024-CW18426When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar
- Not ratedosv:CLEANSTART-2024-AO37431redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information
- Not ratedosv:CLEANSTART-2023-GP07216This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk
- Not ratedosv:CLEANSTART-2026-WB10169When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation
- Not ratedosv:CLEANSTART-2023-FI33720This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk
- Not ratedosv:CLEANSTART-2024-BD40398Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak
- Not ratedosv:CLEANSTART-2023-FP61791Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1
Other news entries
- n8n: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Grafana: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Apple Xcode: Mehrere Schwachstellen ermöglichen Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Composer: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- WSO2 API Manager: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Rancher: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Ghostscript: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Fleet: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
ID