Special Register Buffer Data Sampling Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0543 Description: Incomplete cleanup from specific special register read...

Puma Environment Error Vulnerability

Puma is a Web server for highly concurrent applications from Evan Phoenix Software Developers in the United States. Puma suffers from an environment error vulnerability. An attacker can exploit this vulnerability to conduct HTTP smuggling attacks...

Longbrothers Digital OKLOK Information Disclosure Vulnerability

Longbrothers Digital Fingerprint Bluetooth Padlock FB50 and OKLOK are both products of Longbrothers Digital China.Fingerprint Bluetooth Padlock FB50 is a fingerprint round The Fingerprint Bluetooth Padlock FB50 is a fingerprint round padlock that supports fingerprint unlocking, remote unlocking...

Multiple Schneider Electric Products Data Forgery Issue Vulnerabilities

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A data forgery vulnerability exists in multiple Schneider Electric products, which can be exploited by attackers to execute malicious code...

Juniper Networks Junos OS Evolved Log Message Disclosure Vulnerability (CNVD-2020-29615)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. A log information disclosure...

brazil2018.voices.wooster.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1073278 Security Researcher devl00p Helped patch 2974 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Understanding the Risk of Zero-Day Exploits

To protect your home from thieves, the easiest thing you can do is lock your windows and doors every time you leave the house. Similarly, in cybersecurity, the easiest way to protect your network is to keep your hardware and applications up to date with the latest security patches. But how do you...

cy.thesalesjob.com Cross Site Scripting vulnerability

Security Researcher garletmarco Helped patch 1540 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cy.thesalesjob.com website and its users. Following coordinated and responsible...

WhatsApp, Telegram Coding Blunders Can Expose Personal Media Files

Though WhatsApp and Telegram tout themselves as secure messaging services, faulty developer coding that allows cyberattackers to intercept media files sent on the Android versions of the services like photos and videos, documents and voice memos undercuts that claim. The security weakness, dubbed...

CVE-2019-11094

Insufficient input validation in system firmware for Intel R NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access...

The vulnerability of Microsoft Edge browsers, related to vulnerabilities in access control, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

IBM DataPower Gateway Information Disclosure Vulnerability

IBM DataPower Gateway is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B, and cloud workloads that protects, integrates, and optimizes access across channels...

eloplay.com XSS vulnerability

Open Bug Bounty ID: OBB-669427 Description| Value ---|--- Affected Website:| eloplay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-11412

In the Linux kernel 4.13 through 4.16.11, ext4readinlinedata in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode...

Man-in-the-middle attack vulnerability in multiple Belden Hirschmann switch products (CNVD-2018-04783)

Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of several Belden Hirschmann switch products. An attacker could exploit this vulnerability to obtain sensitive information by performing a man-in-the-middle attack...

SQL Injection Vulnerability in Xinhuo Collaboration Office v1.6.5

Xinhuo coworking system is an open source office system, cross-platform system, support APP, pc web version, pc client and so on. SQL injection vulnerability exists in Xinhao Co-operation Office System v1.6.5, attackers can use the vulnerability to obtain database sensitive information...

elpreg.1upprelaunch.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-562565 Description| Value ---|--- Affected Website:| elpreg.1upprelaunch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

hyderabadtrainings.com XSS vulnerability

Vulnerable URL: http://www.hyderabadtrainings.com/searchresults.php?indexword=prompt"OPENBUGBOUNTY"...

The Next Generation of Genealogy Sitebuilding SQL Injection Vulnerabilities

The Next Generation of Genealogy Sitebuilding TNG is genealogy software developed by Darrin Lythgoe for installation in web servers. A SQL injection vulnerability exists in the primaryID value of the timeline2.php file in versions prior to 11.1.1 of The Next Generation of Genealogy Sitebuilding,...

Microsoft Exchange Server Open Redirect Vulnerability (CNVD-2017-22684)

Microsoft Exchange Server is a mail service program. An open redirection vulnerability exists in Microsoft Exchange Server that allows an attacker to construct a malicious URI, trick users into parsing it, and redirect users to an arbitrary WEB site for phishing attacks...