9092 matches found
Atlassian Jira Server & Data Center Information Disclosure Vulnerability
Atlassian Jira Server ＆ Data Center is the data center version of JIRA from Atlassian Australia. The software is used in a wide range of work areas such as defect tracking, customer service, requirements gathering, process approvals, task tracking, project tracking and agile management. An...
Overlay Malware Targets Windows Users with a DLL Hijack Twist
Brazilians are being warned of a new overlay malware targeting Windows users in order to siphon victims’ financial data and drain their bank accounts. Researchers say what the malware, dubbed Vizom, lacks in sophistication it makes up for in its creative abuse of the Windows ecosystem. Trusteer, ...
Microsoft Windows Media Base Memory Corruption Vulnerability
Microsoft Windows is a desktop operating system from Microsoft. A security vulnerability exists in Microsoft Windows Media Base. An attacker could exploit the vulnerability to install programs; view, change, or delete data; or create new accounts with full user rights...
CVE-2020-12501
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions use undocumented accounts...
Authorization
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions use undocumented accounts...
CVE-2020-12501 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions use undocumented accounts...
PT-2020-13146 · Pepperl+Fuchs +1 · Pepperl+Fuchs P+F Comtrol Rocketlinx Es7510 +8
Name of the Vulnerable Software and Affected Versions: Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions Korenix JetPort 5601V3 all versions Description: The issue concerns ...
Default credentials
Jfrog Artifactory uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0...
CVE-2019-17444 JFrog Artifactory does not enforce default admin password change
Jfrog Artifactory uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0...
A Self-Service Password Reset Project Can Be A Quick Win For IT
Since the beginning of this year, organizations' IT staff have faced numerous challenges and an increased workload as a result of the global pandemic and shift to a mainly remote workforce. Supporting end-users that are now working from home has introduced new challenges in troubleshooting since ...
SwiftBelt - A macOS Enumeration Tool Inspired By Harmjoy'S Windows-based Seatbelt Enumeration Tool
SwiftBelt is a macOS enumerator inspired by @harmjoy's Windows-based Seatbelt enumeration tool. SwiftBelt does not utilize any command line utilities and instead uses Swift code leveraging the Cocoa Framework, Foundation libraries, OSAKit libraries, etc. to perform system enumeration. This can be...
CVE-2020-26522
A cross-site request forgery CSRF vulnerability in mod/user/actuser.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in mod/user/actuser.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...
NFL, NBA Players Hacked in Would-Be Cyber-Slam-Dunk
NFL and NBA athletes whose social-media accounts were taken over have been thrown the ball of justice. Multiple professional and semi-pro athletes were victimized by two men who infiltrated their personal accounts, according to testimony in federal court on Wednesday. Trevontae Washington of...
Twitter removes Iranian accounts disrupting US presidential debate
By Deeba Ahmed The account holders were chattering about disrupting the first US Presidential Debate on Tuesday. Its only been a month when Microsoft warned about possible attempts of state-sponsored cybercriminals, particularly Iranian hackers, to disrupt the upcoming US presidential elections...
U.S. Dept Of Defense: param allows any external resource to be downloadable | https://████████
Description: The following param allows an attacker to trick people into downloading malicious files, scripts and other payloads. https://██████████?url=https:// PoC 1. I will show you how the page looks normally without any changes. If you directly access https://███ you will be shown the...
CVE-2020-16242
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts...
PT-2020-14835 · Reason · Reason S20 Ethernet Switch
Name of the Vulnerable Software and Affected Versions: Reason S20 Ethernet Switch affected versions not specified Description: The issue concerns a cross-site scripting XSS problem, which may allow an attacker to trick application users into performing critical actions, including adding and...
CVE-2020-13302
GitLab CVE-2020-13302 affects GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under certain conditions, sessions were not properly revoked, allowing a malicious user to access an account with an old password. The connected sources confirm this behavior and cite the same vulnerable ranges. Expl...
