Potential data loss when using Instant VM Recovery

Challenge Performing Instant VM Recovery in VMware vSphere environments may result in data loss when using the quick migration feature to move published VM disks to production storage to finalize the recovery. This issue was identified internally by Veeam quality control in late 2019, and the fix...

Why Our Customers Love VMware Carbon Black

As the cybersecurity world advances, organizations are starting to change their approach to security. More and more teams are moving to the cloud to maximize their endpoint protection and simplify their security stack. Using VMWare Carbon Black's Cloud platform, our customers are able to...

PT-2020-8028 · Aruba · Aruba Instant

Name of the Vulnerable Software and Affected Versions: Aruba Instate versions prior to 4.1.3.0 Aruba Instate versions prior to 4.2.3.1 Description: The issue is caused by insufficient validation of user-supplied input and insufficient checking of parameters. This could allow a malicious user to...

CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

The vulnerability of Adobe Connect’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Adobe Connect instant messaging program is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

The vulnerability of the Skype for Business Server’s instant messaging program, related to errors in information presentation by the user interface, allows attackers to carry out spoofing attacks.

The vulnerability of the Skype for Business Server’s instant messaging program is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spam attacks remotely...

The vulnerability of the client’s /roster/module.val module for instant messaging between dinosaurs, related to incorrect authorization, allows a violator to compromise data integrity.

The vulnerability of the /roster/module.vala client for instant messaging in Dino involves insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

Design/Logic Flaw

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2018-16417

Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection...

CVE-2018-16417

Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection...

Command injection

Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection...

CVE-2018-16417

According to ICSA-19-134-07, CVE-2018-16417 is associated with Siemens SCALANCE W1750D and represents an information exposure vulnerability. Affected product: SCALANCE W1750D with versions prior to 8.4.0.1. Mitigation: upgrade to 8.4.0.1 or later; apply access restrictions to the web interface an...

File Upload Vulnerability in Big Ant Instant Messenger

Big Ant Instant Messenger is a cross-platform instant messaging software. A file upload vulnerability exists in Big Ant Instant Messenger, which can be exploited by an attacker to gain server privileges...

HackerOne: Disclosure of Email title report in quick award paypout email (no content mode)

Hello H1 Security Team Description In report 645264 and 669776, email title disclosure has been fixed in no content settings. However, there is one more area which needs to be fix - "Instant bounty Award Email". In this email, even though email settings have been set as "No content", still it's...

PT-2019-3039 · Microsoft · Msxml +2

Name of the Vulnerable Software and Affected Versions: Microsoft XML Core Services MSXML affected versions not specified Description: A remote code execution issue exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploits this issue could...

[SECURITY] Fedora 30 Update: matrix-synapse-1.2.1-1.fc30

Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...

Fedora Update for matrix-synapse FEDORA-2019-80f1943143

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Your Android Phone Can Get Hacked Just By Playing This Video

Are you using an Android device? Beware! You should be more careful while playing a video on your smartphone—downloaded anywhere from the Internet or received through email. That's because, a specially crafted innocuous-looking video file can compromise your Android smartphone—thanks to a critica...