110 matches found
fact-link.com.vn Cross Site Scripting vulnerability OBB-3265625
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CISA Releases Guidance on Phishing-Resistant and Numbers Matching Multifactor Authentication
CISA has released two fact sheets to highlight threats against accounts and systems using certain forms of multifactor authentication MFA. CISA strongly urges all organizations to implement phishing-resistant MFA to protect against phishing and other known cyber threats. If an organization using...
YouTube transparency report shows battle against misinformation
Statistics for YouTube community guidelines enforcement are now available for the period April to June 2022, via Googles Transparency Report. YouTube channels are terminated if they accrue three community guideline strikes in 90 days, have a case of severe abuse predatory behaviour, for example, ...
Firmware Analysis and Comparison Tool跨站请求伪造漏洞
Firmware Analysis and Comparison Tool FACT is a firmware analysis and comparison tool. firmware Analysis and Comparison Tool version v3.2 contains a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that the request is from a trusted user...
CISA Issues BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities
CISA has issued Binding Operational Directive BOD 22-01, Reducing the Significant Risk of Known Exploited Vulnerabilities, to establish specific timeframes for federal civilian agencies to remediate vulnerabilities that are being actively exploited by known adversaries. To support this Directive,...
Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity
CISA has joined with the United Kingdom's National Cyber Security Centre NCSC, the Federal Bureau of Investigation FBI, and the National Security Agency NSA, in releasing a Joint Cybersecurity Advisory on Russian Foreign Intelligence Service SVR tactics, techniques, and procedures. Further TTPs...
fact-link.com.vn Improper Access Control vulnerability OBB-1452144
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-7184
A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
fact-link.com Cross Site Scripting vulnerability OBB-1413227
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fact-link.com.vn Cross Site Scripting vulnerability OBB-1396402
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fact-link.com Cross Site Scripting vulnerability OBB-1383953
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Drovorub Malware
The NSA and FBI have jointly disclosed Drovorub, a Russian malware suite that targets Linux. Detailed advisory. Fact sheet. News articles. Reddit thread...
WhatsApp’s new fact-check feature lets users identify fake information
By Waqas WhatsApp's "Search the Web" feature lets users perform web searches on viral messages to confirm their authenticity. This is a post from HackRead.com Read the original post: WhatsApp’s new fact-check feature lets users identify fake information...
Scams and how to spot them
We’re in strange times at the moment. Some things dont change though e.g. the scams and fraudulent activity designed to separate people from their money or identity. When dealing with these scams the main thing to remember is: If it seems too good to be true, it probably is. While that statement ...
CVE-2020-11499
FACT 3 from Firmware Analysis and Comparison Tool shows a Stored XSS vulnerability when updating analysis details via a localhost web request, caused by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py. This is corroborated by multiple CVE references (NVD, Re...
CVE-2020-11499: Improper Neutralization of Input During Web Page Generation
Firmware Analysis and Comparison Tool FACT 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongotaskconversion.py...
PT-2020-12649
Name of the Vulnerable Software and Affected Versions Firmware Analysis and Comparison Tool FACT version 3 Description The issue is related to Stored XSS when updating analysis details via a localhost web request. This is caused by the mishandling of the tags and version fields in the...
Design/Logic Flaw
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with 1 a trailing " src=" clause, 2 a trailing " temp=" clause, or 3 a...
CVE-2014-4967
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with 1 a trailing " src=" clause, 2 a trailing " temp=" clause, or 3 a...
PYSEC-2020-205
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with 1 a trailing " src=" clause, 2 a trailing " temp=" clause, or 3 a...