2456 matches found
Cisco Webex Meetings Meeting Information and Metadata Issue June 2024
In early May 2024, Cisco identified bugs in Cisco Webex Meetings that we now believe were leveraged in targeted security research activity allowing unauthorized access to meeting information and metadata in Cisco Webex deployments for certain customers. These bugs have been addressed and a fix ha...
Zoom Announces Advanced Encryption for Increased Meeting Security
By Deeba Ahmed Your Zoom meetings are now more secure than ever! This is a post from HackRead.com Read the original post: Zoom Announces Advanced Encryption for Increased Meeting Security...
CVE-2024-4903
A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2024-34816
Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...
CVE-2024-34816
CVE-2024-34816 is a CSRF vulnerability in the Revmakx WPCal.Io – Easy Meeting Scheduler WordPress plugin (WPCal.io) versions
PT-2024-26212 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler
Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a we...
WordPress WPCal.io – Easy Meeting Scheduler Plugin <= 0.9.5.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software WPCal.io – Easy Meeting Scheduler Type Plugin Vulnerable versions = 0.9.5.8 Fixed in 0.9.5.9 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-34816 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 362a10aa888b Credits Maj...
CVE-2024-33530
In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...
CVE-2024-33530
In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...
CVE-2024-33530
In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...
CVE-2024-33530
CVE-2024-33530 affects Jitsi Meet before version 9391. A logic flaw in password-protected meetings using a lobby can disclose the meeting password when a user is invited to a call after waiting in the lobby. Root cause: flawed handling of lobby/password flow. Impact: confidentiality impact high. ...
CVE-2024-32795
Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...
CVE-2024-32795
CVE-2024-32795 describes a Cross-Site Request Forgery (CSRF) vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler. Connected sources indicate the issue affects the WPCal.Io – Easy Meeting Scheduler product and specifically cites versions from n/a through 0.9.5.8. The available documents do ...
PT-2024-24868 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler
Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge...
WordPress WPCal.io – Easy Meeting Scheduler Plugin <= 0.9.5.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software WPCal.io – Easy Meeting Scheduler Type Plugin Vulnerable versions = 0.9.5.8 Fixed in 0.9.5.9 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-32795 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 02396af8cd90 Credits Maj...
The vulnerability of the Meeting Chat component of Zoom’s video conferencing software for Windows operating systems allows a intruder to disclose protected information.
The vulnerability of the Meeting Chat component of Zoom’s video conferencing software for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...
The vulnerability of the Meeting Chat component of Zoom’s video conferencing software, which allows a intruder to disclose protected information
The vulnerability of the Zoom software’s meeting chat component relates to the improper processing of logical operations. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...
BIT-MOODLE-2023-5543 Moodle: duplicating a bigbluebutton activity assigns the same meeting id
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...
Malicious meeting invite fix targets Mac users
Cybercriminals are targeting Mac users interested in cryptocurrency opportunities with fake calendar invites. During the attacks the criminals will send a link supposedly to add a meeting to the target’s calendar. In reality the link runs a script to install Mac malware on the target’s machine...
Zoom VDI Meeting Client < 5.17.5 Vulnerability (ZSB-24005)
The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.17.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24005 advisory. - Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via loca...