ALBA-2021:3049 pcsc-lite bug fix and enhancement update

PC/SC Lite provides a Windows SCard compatible interface for communicating with smart cards, smart card readers, and other security tokens. Bug Fixes: Increase global reader array size to 48 to address issue with RHCS secure channel creation BZ1972569 Increase global reader array size to 48 to...

pcsc-lite bug fix and enhancement update

PC/SC Lite provides a Windows SCard compatible interface for communicating with smart cards, smart card readers, and other security tokens. Bug Fixes: Increase global reader array size to 48 to address issue with RHCS secure channel creation BZ1972569 Increase global reader array size to 48 to...

Microsoft ファミリーセーフティで家族の安全を見守ろう

～家庭で利用する PC・タブレットの設定ガイド～ ご家庭で PC やタブレットの安全な使い方を話し合いながら設...

NCH Quorum 跨站脚本漏洞

NCH Quorum is software that runs as a teleconferencing server on a Windows PC. A cross-site scripting vulnerability exists in NCH Quorum 2.03 and earlier versions. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via /uploaddoc?id=...

CVE-2021-34690

iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass cloud authentication to connect and control a system via TCP port 5970 and 5980...

IDrive 日志信息泄露漏洞

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from US-based IDrive Idrive. A log message disclosure vulnerability exists in iDrive RemotePC versions prior to 7.6.48, where a locally authenticated attacker can read the system's personal key...

Command execution vulnerability in TamronOS IPTV/VOD system (CNVD-2021-49564)

TamronOS IPTV/VOD system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution, the system provides a variety of clients Android set-top box, TV, PC on-demand, cell phone on-demand to facilitate user access through different devices...

Lenovo Computer Manager has a binary vulnerability

Lenovo PC Manager is a computer security software launched by Lenovo Group, developed by Lenovo PC core software team, focusing on the health and network security of Lenovo devices, with pop-up blocking, garbage cleaning, virus checking, optimization and acceleration. A binary vulnerability exist...

Design/Logic Flaw

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations...

CVE-2021-22382

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations...

What A Funny App I Got Here!

When you hear the word "malware", the first thing that might come to your mind is a PC or laptop. You think about some weird advertising pop-ups or unrecognized processes running in the background...

Code Execution Vulnerability in Rice CMS

Dami CMS DamiCMS is a PC station building and cell phone station building integrated all-in-one system. DamiCMS suffers from a code execution vulnerability that can be exploited by attackers to execute code and gain server privileges...

XSS Vulnerability in Hutchinson Cloud PC Client

HeCaiYun is China Mobile's personal online disk, providing personal cloud storage services for all users. There is an XSS vulnerability in the PC client of HeCaiYun, which can be exploited by attackers to obtain user cookie information...

Intel Plugs 29 Holes in CPUs, Bluetooth, Security

Intel has unleashed 29 security advisories to plug up some serious bugs in the BIOS firmware for Intel processors, as well as in its Bluetooth products, Active Management Technology tools, the NUC Mini PC line, and, ironically, in its own security library. Details about the advisories can be foun...

CVE-2020-18166

Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc"...

LAOBANCMS 代码问题漏洞

LAOBANCMS is a content management system based on PHP and MySQL. LAOBANCMS v2.0 version of the existence of arbitrary file upload vulnerability, the vulnerability stems from the unrestricted file upload allows remote attackers can exploit the vulnerability to upload arbitrary files, the method is...

WhatsApp is reportedly working on web version without connected phone

By Waqas Apparently, WhatsApp is working on a Universal Windows Platform that would let you use the app on a PC without using your smartphone. This is a post from HackRead.com Read the original post: WhatsApp is reportedly working on web version without connected phone...

CVE-2021-3464

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation...

pcstore.com.tw Cross Site Scripting vulnerability OBB-1961598

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pcstore.com.tw ---|--- Open Bug Bounty...

Binary vulnerability in jpeg file parsing in Lovecraft Universal Connections PC version

The official version of Lovecraft Universal Player is a universal video and audio playback tool created by Lovecraft. Love Qiyi universal player belongs to the universal player, can support most of the mainstream media formats. It also supports the functions of watching pictures, skinning,...