Patch Tor Browser Bug to Prevent Tracking of Your Online Activities

Open-source Tor browser has been updated to version 10.0.18 with fixes for multiple issues, including a privacy-defeating bug that could be used to uniquely fingerprint users across different browsers based on the apps installed on a computer. In addition to updating Tor to 0.4.5.9, the browser's...

The vulnerability of the programmatically defined Cisco SD-WAN messaging service allows a hacker to create new administrative-level user accounts.

The vulnerability of the programmatically defined Cisco SD-WAN messaging service is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to create new administrative user accounts remotely...

The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of Adobe Connect’s instant messaging service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

The vulnerability of the messaging service provided by the microprogramming software for Cisco RV340, RV340W, RV345, and RV345P allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the message exchange service provided by the microprogramming software for Cisco RV340, RV340W, RV345, and RV345P routers is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary comman...

CVE-2021-1520 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system OS. This vulnerability exists because an interna...

Cisco SD-WAN vManage Software 授权问题漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the messaging service of Cisco SD-WAN vManage, which can be exploited by an attacker to invoke elevated privilege operations,...

Cisco SD-WAN vManage Authentication Bypass Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An authentication bypass vulnerability exists in the Web Messaging Service interface of Cisco SD-WAN vManage, which can be exploited by an...

PT-2021-2984 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software, which could allow an unauthenticated, remote attacker to execute arbitrary code, gain access to...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An authentication bypass vulnerability exists in the Web Messaging Service interface of Cisco SD-WAN vManage, which can be exploited by an...

The vulnerability of the Internet Messaging API component for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Internet Messaging API component for Windows operating systems is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Pivotal Software RabbitMQ 代码问题漏洞

Pivotal Software RabbitMQ is a suite of open source message broker software from Pivotal Software, USA that implements the Advanced Message Queuing Protocol AMQP. A code issue vulnerability exists in JMS Client on RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0, which stems from vulnerability to...

The vulnerability of the Unified Messaging service on Microsoft Exchange Server allows a perpetrator to execute arbitrary code.

The vulnerability of the Unified Messaging service on Microsoft Exchange Server is related to deficiencies in the data deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2021-26857

Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: wvu-r7 at March 03, 2021 6:59pm UTC reported: As per Microsoft’s blog post on Exchange Server 0day use by the HAFNIUM actors, CVE-2021-26857 is a deserialization vulnerability in Exchange Server’s Unified Messaging...

PT-2021-2213

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A flaw exists in Microsoft Exchange Server’s Unified Messaging service related to data deserialization. Successful exploitation could allow a remote attacker to execute...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

New Web-Based Credit Card Stealer Uses Telegram Messenger to Exfiltrate Data

Cybercriminal groups are constantly evolving to find new ways to pilfer financial information, and the latest trick in their arsenal is to leverage the messaging app Telegram to their benefit. In what's a new tactic adopted by Magecart groups, the encrypted messaging service is being used to send...

F5 NGINX Controller Authentication Vulnerability

F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. A security vulnerability exists in the NGINX controller NATS messaging service in F5 NGINX Controller versions 1.0....

GHSA-C2Q3-4QRH-FM48 Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and...

The vulnerability of Microsoft Lync Server’s messaging server, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Lync Server’s messaging server is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service allows a perpetrator to disclose protected information.

The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information by sending a specially...