7344 matches found
CVE-2020-10073
GitLab EE 12.4.2 through 12.8.1 allows Denial of Service. It was internally discovered that a potential denial of service involving permissions checks could impact a project home page...
CVE-2020-10073
Removed by vendor...
Suddenly Teleworking, Securely
So you suddenly have a lot of staff working remotely. Telework is not new and a good percentage of the workforce already does so. But the companies who have a distributed workforce had time to plan for it, and to plan for it securely. A Lot of New Teleworkers All At Once This event can't be treat...
PT-2020-11898 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.4.2 through 12.8.1 Description: The issue involves a potential denial of service related to permissions checks, which could impact a project home page. Recommendations: For GitLab EE versions 12.4.2 through 12.8.1, updat...
ASUS AXSP 1.02.00 - (asComSvc) Unquoted Service Path Vulnerability
Exploit Title: ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path Discovery by: Roberto Piña Vendor Homepage: https://www.asus.com/ Software Link :https://dlcdnets.asus.com/pub/ASUS/misc/utils/AISuite3Win10H97M-ProV10102.zip?ga=2.170180192.1334401606.1583873755-790266082.1583873755 Tested...
ASUS AXSP 1.02.00 Unquoted Service Path
Exploit Title: ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path Discovery by: Roberto Piña Discovery Date: 2020-03-10 Vendor Homepage: https://www.asus.com/ Software Link...
Multiple Quick Heal Products Input Validation Error Vulnerability
Quick Heal Total Security, Home Security and Total Security Multi-Device are antivirus programs from Quick Heal India. A security vulnerability exists in the AV parsing engine in several Quick Heal products. The vulnerability can be exploited by attackers to bypass virus checks with the help of...
ASUS GiftBox Desktop 1.1.1.127 - ASUSGiftBoxDesktop Unquoted Service Path
ASUS GiftBox Desktop 1.1.1.127 - ASUSGiftBoxDesktop Unquoted Service Path Exploit Title: ASUS GiftBox Desktop 1.1.1.127 - 'ASUSGiftBoxDesktop' Unquoted Service Path Discovery by: Oscar Flores Discovery Date: 2020-03-05 Vendor Homepage: https://www.asus.com/ Software Link :...
NCSC Releases Advisory on Securing Internet-Connected Cameras
The United Kingdom UK National Cyber Security Centre NCSC has released an advisory on securing internet-connected cameras such as smart security cameras and baby monitors. An attacker could gain access to unsecured, or poorly secured, internet-connected cameras to obtain live feeds or images. The...
CVE-2020-9550
Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...
IoT Insecurity: When Your Vacuum Turns on You
SAN FRANCISCO – Hackable Internet of Things IoT devices are on full display this week at the RSA Conference 2020. They include everything from baby monitors to Wi-Fi chips. One such device is a connected vacuum cleaner, the Trifo Ironpie M6. According to researchers with Checkmarx, the vacuum has...
Nantong Home Information Technology Co., Ltd. website building system has SQL injection vulnerability
Nantong Home Information Technology Co., Ltd, formerly known as the Nantong Network Marketing Club, the purpose is to use their expertise and resources for the development of Nantong enterprises to help more enterprises in the Nantong area better through the network platform development for the...
Nantong Home Information Technology Co., Ltd. website building system suffers from SQL injection vulnerability
Nantong Home Information Technology Co., Ltd. is a main: Nantong website construction, Nantong Baidu promotion, Nantong Baidu optimization, Nantong 360 promotion, Nantong Sogou promotion, Nantong mass mailing software, Nantong business license agency and other business companies. Nantong Home...
In Safe Hands with Trend Micro Home Network Security – Part 3: Testing Its Functions
We continue our four-part series on protecting your home and family. See the links to the previous parts at the end of this blog. As you use more internet-connected devices and smart appliances in your home, it’s of utmost importance to make sure your gadgets are properly protected from malware a...
procps: Local privilege escalation in top
If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory without any security check. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of...
D-Link DIR-867, DIR-878 and DIR-882 HNAP Authentication Bypass Vulnerability
The D-Link DIR-867, DIR-878, and DIR-882 are wireless router products from AUO D-Link of Taiwan, China.HNAP is the existence of a protocol called HNAP Home Network Administration Protocol. A security vulnerability exists in the processing of HNAP login requests in the D-Link DIR-867, DIR-878, and...
CVE-2020-9362
The Quick Heal AV parsing engine November 2019 allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Andro...
Design/Logic Flaw
The Quick Heal AV parsing engine November 2019 allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Andro...
Western Digital My Cloud Home and ibi Licensing Issues Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. An authorization issue vulnerability exists in Western Digital My Cloud Home versions prior to 3.6.0 and ibi versions prior to 3.6.0. The vulnerability stems from a lack of authentication measures or insufficient...