CVE-2020-9801

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application...

CVE-2020-9801

CVE-2020-9801 (Safari) describes a logic issue in Safari fixed in Safari 13.1.1. A malicious process could cause Safari to launch an application. Affected component is Safari’s WebKit on macOS (local attack vector with low/moderate impact per CVSS). The public records consistently state the fix i...

CVE-2020-9801: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application...

Games Don't Do Enough to Combat Toxicity at Launch

Riot Games has cutting-edge moderation tools at its disposal. Few of them are present in Valorant, which launched this week...

Unspecified Vulnerability in Apple Safari (CNVD-2020-52146)

Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 13.1.1, which can be exploited by an attacker with the help of a malicious process to cause Safari to...

PT-2020-20770

Name of the Vulnerable Software and Affected Versions Safari versions prior to 13.1.1 Description A logic issue was addressed with improved restrictions, which may allow a malicious process to cause Safari to launch an application. Recommendations For versions prior to 13.1.1, update to Safari...

CVE-2020-12693

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user...

Race condition

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user...

UBUNTU-CVE-2020-12693

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user...

CVE-2020-12642

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import...

PT-2020-13180

Name of the Vulnerable Software and Affected Versions service-api versions 3.1.0 through 4.3.11 service-api versions 5.0.0 through 5.1.0 Description An issue in service-api allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import. This is due to the XML parser not being...

Citrix Workspace App for Linux – Session failed to launch on CentOS8.x and Fedora 29-31

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The session launch using CWA Linux in distributions like Centos 8.x and Fedora 29-31 will fail with...

Memory leak in RPCSS and DcomLaunch services in Windows 8.1 or Windows Serer 2012 R2

Memory leak in RPCSS and DcomLaunch services in Windows 8.1 or Windows Serer 2012 R2 This article describes an issue in which memory leak occurs in Windows remote procedure call service RPCSS and DCOM Server Process Launcher DcomLaunch services in Windows 8.1, Windows RT 8.1, or Windows Server 20...

Qualys Cloud Platform 3.0 New Features

This release of the Qualys Cloud Platform version 3.0 includes updates and new features for Vulnerability Management, highlights as follows. Vulnerability Management The following features apply to all subscriptions that are currently using the Vulnerability Management Dashboard beta. With this...

Google & Microsoft launch tools to address Coronavirus outbreak

By Deeba Ahmed Google's Coronavirus tool is called COVID-19 risk screening and testing while Microsoft calls it Bing COVID Tracker. This is a post from HackRead.com Read the original post: Google & Microsoft launch tools to address Coronavirus outbreak...

CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...

CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...

CVE-2020-6797: Improper Input Validation

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...

HackerOne: Customer private program can disclose email any users through invited via username

Summary: Hey team,This bug could have been used by my calculations a long time ago Steps To Reproduce: 1Go to https://hackerone.com/hackeroneh1pbbp3/launch 2Take invite via username 3Input username , send invite 3.1When an invite is created, we get a token 4Now Go use GraphQL query...

CVE-2020-8794

OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mtaio in mtasession.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce...