Lucene search
+L

3996 matches found

CNVD
CNVD
•added 2020/09/10 12:00 a.m.•22 views

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2020-52908)

Microsoft Dynamics 365 is Microsoft's next-generation intelligent business application that helps enterprises grow and digitally transform through the perfect integration of CRM and ERP. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 9.0. The vulnerability stems from the...

5.4CVSS6AI score0.01634EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
•added 2020/09/09 5:07 p.m.•97 views

Malvertising campaigns come back in full swing

Malvertising campaigns leading to exploit kits are nowhere near as common these days. Indeed, a number of threat actors have moved on to other delivery methods instead of relying on drive-by downloads. However, occasionally we see spikes in activity that are noticeable enough that they highlight ...

10CVSS6.7AI score0.89581EPSS
SaveExploits22
Tenable Nessus
Tenable Nessus
•added 2020/09/08 12:00 a.m.•62 views

EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2020-1952)

According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The samba-libs package contains the libraries needed by programs that link against the SMB, RPC and other protocols...

7.8CVSS6.4AI score0.03874EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/09/07 12:00 a.m.•16 views

Noise-Java Out-of-Bounds Access Vulnerability

Noise-Java is a plain Java implementation of the Noise protocol. An out-of-bounds access vulnerability exists in AESGCMOnCtrCipherState.encryptWithAd in Noise-Java 2020-08-27 and earlier versions. No detailed vulnerability details are provided at this time...

9.8CVSS6.9AI score0.02553EPSS
SaveExploits2References1
Microsoft Secure
Microsoft Secure
•added 2020/09/03 4:00 p.m.•40 views

3 ways Microsoft 365 can help you reduce helpdesk costs

With more people than ever working remotely, organizations must maximize employee productivity while protecting an ever-growing digital footprint. Many have stitched together specialized security solutions from different vendors to improve their cybersecurity posture, but this approach is expensi...

7.5AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/08/28 5:35 a.m.•11 views

ad-rf.com Cross Site Scripting vulnerability OBB-1281643

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.8AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2020/08/27 4:10 p.m.•25 views

Facebook Hits Back At Apple’s iOS 14 Privacy Update

Facebook is lambasting an upcoming Apple mobile operating system privacy update, which requires application to ask users for permission before collecting and sharing their data. In the iOS 14 update, Apple iPhone and iPad users have an explicit option to opt out of allowing apps to collect data...

6.4AI score
SaveExploits0References13
Openbugbounty
Openbugbounty
•added 2020/08/27 10:37 a.m.•12 views

ad-reality.sk Cross Site Scripting vulnerability OBB-1279929

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2020/08/25 10:54 a.m.•51 views

Popular iOS SDK Accused of Spying on Billions of Users and Committing Ad Fraud

A popular iOS software development kit SDK used by over 1,200 apps—with a total of more than a billion mobile users—is said to contain malicious code with the goal of perpetrating mobile ad-click fraud and capturing sensitive information. According to a report published by cybersecurity firm Snyk...

0.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2020/08/25 10:54 a.m.•17 views

Popular iOS SDK Accused of Spying on Billions of Users and Committing Ad Fraud

A popular iOS software development kit SDK used by over 1,200 apps—with a total of more than a billion mobile users—is said to contain malicious code with the goal of perpetrating mobile ad-click fraud and capturing sensitive information. According to a report published by cybersecurity firm Snyk...

5.7AI score
SaveExploits0
OSV
OSV
•added 2020/08/24 6:15 p.m.•16 views

CVE-2020-7705

This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the...

8.1CVSS7.3AI score0.0117EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2020/08/24 6:15 p.m.•8 views

CVE-2020-7705

This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the...

8.1CVSS7.9AI score0.0117EPSS
SaveExploits0References6
CVE
CVE
•added 2020/08/24 5:15 p.m.•65 views

CVE-2020-7705

The CVE-2020-7705 entry concerns MintegralAdSDK (iOS) with malicious functionality that tracks every opened URL and reports it to an external server, performing ad-attribution fraud even if ads are not served. It can remotely activate hooks on UIKit components (UIApplication, openURL, SKStoreProd...

8.1CVSS7.5AI score0.0117EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2020/08/18 8:26 a.m.•11 views

Malicious Package

Overview MintegralAdSDK is a malicious package. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the...

8.1CVSS6.6AI score0.0117EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2020/08/13 5:55 p.m.•49 views

ad-style.oncartx.io Cross Site Scripting vulnerability OBB-1259184

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2020/08/13 4:00 p.m.•65 views

New Forrester study shows customers who deploy Microsoft Azure AD benefit from 123% ROI.

Over the past six months, organizations around the world have accelerated digital transformation efforts to rapidly enable a remote workforce. As more employees than ever access apps via their home networks, the corporate network perimeter has truly disappeared, making identity the control plane...

7.4AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2020/08/12 7:15 p.m.•48 views

The Publishing Industry -- Where to Now?

Many of us have spent far more time at home looking at screens to keep up to date with the world than would have seemed possible at the start of the year. In the UK, as with many other countries, the lockdown rules and pandemic response were changing on a near-daily basis, and the 5 PM government...

7.1AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2020/08/11 5:43 p.m.•70 views

Microsoft Office 365—Do you have a false sense of cloud security?

Through difficult times, some adversaries will find opportunities and COVID-19 has proven to be a ripe opportunity for them to target a new, expanding, remote workforce. While these threats morph and evolve, Microsoft’s Detection and Response Team DART finds ways to endure and help organizations...

7.7AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/08/11 7:00 a.m.•214 views

Description of the security update for SharePoint Enterprise Server 2016: August 11, 2020 (KB4484473)

None None...

8.8CVSS6.5AI score0.04906EPSS
SaveExploits0
NVD
NVD
•added 2020/08/06 7:15 p.m.•32 views

CVE-2020-13793

Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key...

9.8CVSS9.4AI score0.01687EPSS
SaveExploits0References2
Rows per page
Query Builder