SHAREit for Windows and Android Vulnerabilities - Lenovo Support US

No description provided...

SHAREit for Windows and Android Vulnerabilities

Lenovo Security Advisory: LEN-4058 Potential Impact: Remote browsing of file system, and unauthorized access of files on Windows and Android denial of service attack that could crash the Windows SHAREit client Severity: High Lenovo SHAREit Application: End of Lenovo Support Summary: Vulnerabiliti...

Google Shuts Down Docs Phishing Spree

Google said it has disabled offending accounts involved in a widespread spree of phishing emails today impersonating Google Docs. The emails, at the outset, targeted journalists primarily and attempted to trick victims into granting the malicious application permission to access the user’s Google...

Input Validation Bypass

Apache Hadoop HDFS is vulnerable to input validation bypass. The attack is possible because it does not correctly handle the validation of the input to NameNode when it is sent as a query parameter during the interaction of the HDFS client with the DataNode in the HDFS namespace browsing. A user...

CVE-2017-3162

HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0...

MyBB Directory Traversal Vulnerability (CNVD-2017-06579)

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A directory traversal vulnerability exists in the smilie module in MyBB versions prior to 1.8.11. The vulnerability can be exploited to browse files with the 'pathfolder' parameter...

UBUNTU-CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

Russian Hacker Selling Cheap Ransomware-as-a-Service On Dark Web

Ransomware has been around for a few years, but it has become an albatross around everyone's neck, targeting businesses, hospitals, financial institutions and individuals worldwide and extorting millions of dollars. Forget about developing sophisticated banking trojans and malware to steal money...

Design/Logic Flaw

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

CVE-2017-7646

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

CVE-2017-7646

SolarWinds Log & Event Manager (LEM) prior to 6.3.1 Hotfix 4 allows an authenticated user to browse the server filesystem and read arbitrary files. Risk details are not expanded beyond this description in the provided documents. Remediation: upgrade to 6.3.1 Hotfix 4 or newer where indicated.

CVE-2017-7646: Exposure of Sensitive Information to an Unauthorized Actor

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

CVE-2017-2384

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode...

Arbitrary file deletion

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode...

CVE-2017-2384

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode...

CVE-2017-2384

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode...

CVE-2017-2384

CVE-2017-2384 affects iOS Safari prior to 10.3. The issue arises from mishandling of deletions in the SQLite subsystem of the Safari component, allowing a local user to identify websites visited in Private Browsing mode. The dedicated Apple advisory notes the fix involved improved SQLite cleanup,...

CVE-2017-2384: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode...

PT-2017-1759

Name of the Vulnerable Software and Affected Versions Safari versions prior to 10.3 Description The issue is related to the mishandling of deletion within the SQLite subsystem of the Safari component, allowing local users to identify web-site visits that occurred in Private Browsing mode. This is...