5151 matches found
GitHub Security Lab: [Java] CWE-094: Jython code injection
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java]: CWE-601 Spring url redirection detect
This bug was reported directly to GitHub Security Lab...
SimuLand: Understand adversary tradecraft and improve detection strategies
At Microsoft, we continuously collaborate with customers and the InfoSec community to learn more about the latest adversary tradecraft so that we can improve our detection strategies across all our security services. Even though those detections are already built into our products, and protecting...
SimuLand: Understand adversary tradecraft and improve detection strategies
At Microsoft, we continuously collaborate with customers and the InfoSec community to learn more about the latest adversary tradecraft so that we can improve our detection strategies across all our security services. Even though those detections are already built into our products, and protecting...
About the security content of Boot Camp 6.1.14
About the security content of Boot Camp 6.1.14 This document describes the security content of Boot Camp 6.1.14. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Cisco RV34X系列 权限提升漏洞（CVE-2021-1520）
Advisory: Cisco RV34X Series - Privilege Escalation in vpnTimer May 5, 2021 |In Research |By [email protected] TL;DR A few weeks ago, we published an advisory on the Cisco RV series routers, where we outlined the root cause for authentication bypass and remote command execution issues...
GitHub Security Lab: [Java] CWE-078: Add JSch lib OS Command Injection sink
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Python] CWE-400: Regular Expression Injection
This bug was reported directly to GitHub Security Lab...
Updated pngcheck packages fix a security vulnerability
This update fixes a divide-by-zero crash bug and probable vulnerability in interlaced images with extra compressed data beyond the nominal end of the image data. found by "chiba of topsec alpha lab" rhbz1949800...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204-exiftool Python exploit for the CVE-2021-22204...
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in we...
GitHub Security Lab: [JAVA]: CWE-347 - Improper Verification of Cryptographic Signature : Potential for Auth Bypass
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: ihsinme: CPP Add query for CWE-691 Insufficient Control Flow Management After Refactoring The Code
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-348: Use of less trusted source
This bug was reported directly to GitHub Security Lab...
Researchers Uncover Iranian State-Sponsored Ransomware Operation
Iran has been linked to yet another state-sponsored ransomware operation through a contracting company based in the country, according to new analysis. "Iran's Islamic Revolutionary Guard Corps IRGC was operating a state-sponsored ransomware campaign through an Iranian contracting company called...
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in we...
Epic Games Psyonix Rocket League <=1.95 Insecure Permissions
Summary Rocket League is a high-powered hybrid of arcade-style soccer and vehicular mayhem with easy-to-understand controls and fluid, physics-driven competition. Description The application suffers from an elevation of privileges vulnerability which can be used by a simple authenticated user tha...
GitHub Security Lab: [Java] Query for detecting Jakarta Expression Language injections
This bug was reported directly to GitHub Security Lab...