9105 matches found
CVE-2018-1150
NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses exists...
CVE-2018-1150
NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses exists...
CVE-2018-1150
CVE-2018-1150 affects NUUO NVRMini2 (all versions
TradingView Cross-Site Scripting Vulnerability
TradingView Charting Library is an open source and free K chart analysis tool, with a comprehensive API. support for ordinary json data UDF, there is also support for websocket JSAPI, most of the digital currency exchanges use this component library as a K line analysis tool. TradingView has a...
Apple iOS Accounts Component Information Disclosure Vulnerability
Apple iOS is an operating system developed by Apple Inc. for mobile devices, and Accounts is one of the user account components. A security vulnerability exists in the Accounts component in versions of Apple iOS prior to 12. The vulnerability can be exploited by an attacker to read persistent...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Design/Logic Flaw
An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable EXE or dynamical...
Design/Logic Flaw
Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1...
CVE-2018-16654
Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1...
CVE-2018-16654
Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1...
Cisco Webex Teams Information Disclosure and Modification Vulnerability
Cisco Webex Teams is a team collaboration application from Cisco USA. The program includes features such as video conferencing, group messaging and file sharing. An information disclosure and modification vulnerability exists in Cisco Webex Teams, which stems from the affected software performing...
Compromised Web Application Detection (HTTP)
This script reports if a web page of the remote host was compromised by known Skimmer / Malware code. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Cisco Webex Teams Information Disclosure and Modification Vulnerability
A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The vulnerability exists because the affected software performs insufficient checks for associations between use...
OpenSSH 'auth2-gss.c' User Enumeration Vulnerability - Windows
OpenSSH is prone to a user enumeration vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OpenSSH 'auth2-gss.c' User Enumeration Vulnerability - Linux
OpenSSH is prone to a user enumeration vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Google 'Titan Security Key' Is Now On Sale For $50
Google just made its Titan Security Key available on its store for $50. First announced last month at Google Cloud Next '18 convention, Titan Security Key is a tiny USB device—similar to Yubico's YubiKey—that offers hardware-based two-factor authentication 2FA for online accounts with the highest...
Instagram Adds 3 New Security Tools to Make its Platform More Secure
Instagram is growing quickly—and with the second most popular social media network in the world behind just Facebook, the photo-sharing network absolutely dominates when it comes to user interactions. And with great success comes great responsibility—responsibility to keep users' accounts safe,...
The vulnerability of the OpenSSH cryptographic protection mechanism lies in the varying responses of the server to authentication requests. This allows attackers to discover existing user accounts.
The vulnerability of the OpenSSH cryptographic protection mechanism is related to the varying responses of the server to authentication requests, depending on whether corresponding user accounts are present or absent. Exploiting this vulnerability allows a perpetrator to discover existing user...
Chaturbate: [chaturbate.com] - CSRF Vulnerability on image upload
Summary Hi guys, One of the features available to a Chaturbate user is the ability to upload images into photo sets. The upload functionality does not use any CSRF tokens, allowing attackers to perform CSRF attacks and upload images to a user's profile without the user's consent. Steps To...