WordPress Video Conferencing with Zoom Plugin <= 4.4.5 is vulnerable to Sensitive Data Exposure

Software Video Conferencing with Zoom Type Plugin Vulnerable versions = 4.4.5 Fixed in 4.4.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2033 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c7d4e51cfd6e Credits Krzysztof Zaj...

CVE-2024-2031

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoomrecordingsbymeeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress Plugin Video Conferencing with Zoom Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Video Conferencing with Zoom Plugin <= 4.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Video Conferencing with Zoom Type Plugin Vulnerable versions = 4.4.4 Fixed in 4.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2031 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9603227b9596 Credits Krzysztof...

Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

Threat actors have been leveraging fake websites advertising popular video conferencing software such as Google Meet, Skype, and Zoom to deliver a variety of malware targeting both Android and Windows users since December 2023. "The threat actor is distributing Remote Access Trojans RATs includin...

HCL Sametime Security Vulnerability

HCL Technologies HCL Sametime is a conferencing solution from HCL Technologies, USA. A security vulnerability exists in HCL Sametime that stems from a lack of clickjacking protection...

HCL Sametime Authorization Issues Vulnerability

HCL Technologies HCL Sametime is a conferencing solution from HCL Technologies, USA. A security vulnerability exists in HCL Sametime that stems from the inability to disable a session...

The vulnerability of microprogrammed software in telephones and audio conferencing systems for Poly allows a intruder to change the administrator password.

The vulnerability of microprogrammed software in telephones and audio conferencing systems is related to the lack of necessary checks during password changes. Exploiting this vulnerability can allow a remote attacker to change the administrator’s password...

Pexip Infinity Security Vulnerability

Pexip Infinity is a cloud collaboration platform for video conferencing from Pexip Norway. The product provides high quality and secure cloud conferencing capabilities. A security vulnerability exists in Pexip Infinity VMR self-service portal prior to version v3 that could allow an attacker to...

The vulnerability of Zoom’s video conferencing software, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Zoom’s video conferencing software relates to the use of an unreliable search path, which allows a hacker to trigger a service failure.

The vulnerability of Zoom’s video conferencing software is related to the use of an unreliable search path. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of Zoom’s video conferencing software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of Zoom’s video conferencing software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges...

BigBlueButton Code Issue Vulnerability

BigBlueButton is an open source web conferencing system from the BigBlueButton community. BigBlueButton has a code issue vulnerability that stems from vulnerability to server-side request forgery SSRF attacks...

Microsoft Skype for Business Remote Code Execution Vulnerability (CNVD-2023-92200)

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

Microsoft Skype for Business Remote Code Execution Vulnerability

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

Updates for Skype for Business Server 2019 (KB4470124)

None None...

The vulnerability of iMind video conferencing software lies in its ability to allow the insertion of code or data, enabling a hacker to execute arbitrary code with administrative privileges.

The vulnerability of the iMind video conference software relates to the possibility of code or data being injected into the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with administrative privileges...

Zoom clarifies user consent requirement when training its AI

Changes in the terms of service TOS of the Zoom video-conferencing software have caused some turmoil. Since the pandemic, Zoom Video Conferencing has become a household name. Zoom came up as the big winner in the video conferencing struggle that enabled us to work from home. Now that things are...

Using Machine Learning to Detect Keystrokes

Researchers have trained a ML model to detect keystrokes by sound with 95% accuracy. "A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards" Abstract: With recent developments in deep learning, the ubiquity of microphones and the rise in online services via personal devices,...

login.redbackconferencing.com.au Cross Site Scripting vulnerability OBB-3558166

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...