1377 matches found
BigBlueButton Greenlight has an unspecified vulnerability
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. versions prior to BigBlueButton Greenlight 2.5.6 have a security vulnerability that stems from an allow HTTP header host and source attack, which can be exploited by an attacker to cause an account takeover...
Arbitrary File Download Vulnerability in Haozitong Video Conferencing System of Shenzhen Yinpeng Cloud Computing Co.
Shenzhen YinPeng Cloud Computing Co., Ltd. was established on September 11, 2013, the company's scope of business includes the development and sale of cloud computing technology, computer software, hardware product design and so on. Shenzhen YinPeng Cloud Computing Co., Ltd. GoodView video...
BigBlueButton 2.2.25 File Disclosure / Server-Side Request Forgery
Advisory: Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton RedTeam Pentesting discovered a vulnerability in the BigBlueButton web conferencing system which allows participants of a conference with permissions to upload presentations to read arbitrary files from the file...
Overlay Malware Targets Windows Users with a DLL Hijack Twist
Brazilians are being warned of a new overlay malware targeting Windows users in order to siphon victims’ financial data and drain their bank accounts. Researchers say what the malware, dubbed Vizom, lacks in sophistication it makes up for in its creative abuse of the Windows ecosystem. Trusteer, ...
India Witnessed Spike in Cyber Attacks Amidst Covid-19 - Here's Why?
The COVID-19 outreach is turning out to be not only health, social, and economic hazard but also a cybersecurity crisis. The pandemic has presented new challenges for businesses in the areas of remote collaboration and business continuity. With increased remote working for better business...
India Witnessed Spike in Cyber Attacks Amidst Covid-19 - Here's Why?
The COVID-19 outreach is turning out to be not only health, social, and economic hazard but also a cybersecurity crisis. The pandemic has presented new challenges for businesses in the areas of remote collaboration and business continuity. With increased remote working for better business...
Cisco Fixes High-Severity Webex, Security Camera Flaws
Cisco has issued patches for high-severity vulnerabilities plaguing its popular Webex video-conferencing system, its video surveillance IP cameras and its Identity Services Engine network administration product. Overall, Cisco on Wednesday issued the three high-severity flaws along with 11...
Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-06487)
Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip Norway. Pexip Infinity is vulnerable to an input validation error that could be exploited to temporarily terminate the software via RTP...
londonvideoconferencing.co.uk Cross Site Scripting vulnerability OBB-1361256
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SMB cybersecurity posture weakened by COVID-19, Labs report finds
In August, Malwarebytes Labs analyzed the damage caused by COVID-19 to business cybersecurity. Because of immediate, mandated transitions to working from home WFH, businesses across the United States suffered more data breaches, lost more dollars, and increased their overall attack surfaces, all...
CVE-2020-11797
An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...
CVE-2020-11797
An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...
Authentication flaw
An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...
CVE-2020-11797
An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...
CVE-2020-11797
Mitel MiCollab AWV contains an authentication bypass in the Published Area of the Web Meeting component, affecting versions before 8.1.2.4 and 9.x before 9.1.3. An unauthenticated attacker could gain access to unauthorized information by bypassing access validation and may access sensitive shared...
You are not alone; video conferencing app Zoom is down for many
By Waqas You are not alone; Zoom is down for many around the world. This is a post from HackRead.com Read the original post: You are not alone; video conferencing app Zoom is down for many...
Cisco 7947G Elevation of Privilege Vulnerability
The Cisco 7947G is an online conferencing endpoint device from Cisco USA. A security vulnerability exists in the Cisco 7947G product. An attacker could exploit the vulnerability to elevate privileges...
Cisco 7937G Denial of Service Vulnerability
The Cisco 7937G is an online conferencing endpoint device from Cisco USA. A security vulnerability exists in the Cisco 7937G versions 1-4-4-0 through 1-4-5-7. An attacker could exploit the vulnerability to cause a denial of service...
Top Tips For Home Cybersecurity And Privacy In A Coronavirus-Impacted World (Part 1)
Welcome to the new normal. We’re all now living in a post-COVID-19 world characterized by uncertainty, mass home working and remote learning. The lines demarcating normal life have shifted abruptly – perhaps never to return. That’s not the worst that can happen, as we all know, but it does mean w...
News Wrap: Twitter Hack, Apple Under Fire and Global Privacy Finger Wags
In this week’s Threatpost news wrap podcast, editors Tara Seals and Lindsey O’Donnell-Welch break down the top security news stories, including: Hackers accessed direct messages DMs for 36 of the 130 high-profile users whose accounts were hacked in an unprecedented account breach last week, Twitt...