The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software, related to buffer overflow in the stack, allows a hacker to gain remote access to the device.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to gain remote access to the device...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software, related to buffer overflow in the queue, allows a intruder to gain remote access to the device.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to gain remote access to the device...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software lies in the lack of authentication mechanisms, which allows attackers to bypass the authentication process.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor to bypass authentication and cause service failures...

CVE-2022-21731 Type confusion leading to segfault in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for ConcatV2 can be used to trigger a denial of service attack via a segfault caused by a type confusion. The axis argument is translated into concatdim in the ConcatShapeHelper helper function. Then, a...

Your Graphics Card Fingerprint Can Be Used to Track Your Activities Across the Web

Researchers have demonstrated a new type of fingerprinting technique that exploits a machine's graphics processing unit GPU as a means to persistently track users across the web. Dubbed DrawnApart, the method "identifies a device from the unique properties of its GPU stack," researchers from...

CVE-2021-44418

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetMdState param is not object. An attacker can send an HTTP request to trigger this vulnerability...

Simplifying Cloud Asset Identification in a Multi-Cloud Environment

Enterprises struggle to get an accurate asset inventory in multi-cloud or hybrid cloud environments. Qualys enhances the metadata for cloud assets while simplifying the collection process. This blog explains how this functionality expedites the identification process, easily identifies vulnerable...

CVE-2019-25056

In Bromite through 78.0.3904.130, there are adblock rules in the release APK; therefore, probing which resources are blocked and which aren't can identify the application version and defeat the User-Agent protection mechanism...

Design/Logic Flaw

In Bromite through 78.0.3904.130, there are adblock rules in the release APK; therefore, probing which resources are blocked and which aren't can identify the application version and defeat the User-Agent protection mechanism...

CVE-2019-25056

Bromite (Chromium fork) versions up to 78.0.3904.130 are affected by a vulnerability arising from hard-coded adblock rules in the release APK. The issue allows an attacker to probe which resources are blocked vs. allowed, enabling identification of the exact application version and potentially de...

CVE-2021-44994

There is an Assertion ''JERRYCONTEXT jmemheapallocatedsize == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0...

CVE-2021-46348

There is an Assertion 'ECMASTRINGISREFEQUALSTOONE stringp' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0...

CVE-2021-46339

There is an Assertion 'litisvalidcesu8string stringp, stringsize' failed at /base/ecma-helpers-string.cecmanewecmastringfromutf8 in JerryScript 3.0.0...

CVE-2022-23408

creationtimestamp| type| source ---|---|--- 2022-01-19 00:25:00+00:00| seen| https://t.me/cibsecurity/35751...

CVE-2022-21688 Out-of-bounds Read in Onionshare

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing...

Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware

Bad Blood Bad Blood is an exploit for CVE-2021-20038https:...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

The FTC Wants Companies to Find Log4j Fast. It Won't Be Easy

The critical vulnerability is buried among endless open source code, and many cyber experts are stumped...

CVE-2021-29454 Sandbox Escape by math function in smarty

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the...

Log4Shell Strategic Response: 5 Practices for Vulnerability Management at Scale

This post is co-authored by Blake Cifelli, Senior Advisory Services Consultant. In today’s cybersecurity world, risks evolve faster than we can remediate them. To meet our goals and become resilient to these fast changes, we need the right balance of automation and human interaction. Enabling rap...