5444 matches found
Real-Time Find and Replace < 4.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
This flaw could allow any user to inject malicious Javascript anywhere on a site if they could trick a site’s administrator into performing an action, like clicking on a link in a comment or email...
Real-Time Find and Replace < 4.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
This flaw could allow any user to inject malicious Javascript anywhere on a site if they could trick a site’s administrator into performing an action, like clicking on a link in a comment or email. PoC...
The vulnerability in the implementation of the WebRTC protocol in Google Chrome browser allows a perpetrator to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the WebRTC protocol implementation in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...
Qualys Response to Rapid7’s False Claims on VMDR
As remote working is becoming the need of the hour, IT and Security teams are working tirelessly to ensure continuity of services and deliver on all aspects of the business. To help our customers in these challenging times, we launched a 60-day no-cost ‘Remote Endpoint Protection’ service for...
Residential Internet Connections are now Business Connections: What about Security and Compliance?
Near-global mandates to stay at home have completely reshaped the internet security landscape. Remote work is the new normal, inverting the traditional office model. Attackers are not relenting as they see opportunity to take advantage of a world with a singular focus. Here are a couple of recent...
The vulnerability of the configuration of HTTP proxy servers for WebKitGTK and WPE WebKit modules, which allow attackers to gain unauthorized access to protected information.
The vulnerability of the configuration of HTTP proxy servers for WebKitGTK and WPE WebKit modules related to improper data processing during real-time video loading. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
How to transform your revolutionary idea into a reality: $100K Nokia Bell Labs Prize
Revolutionary ideas in science, technology, engineering, and mathematics don't occur every day. But when those "eureka" moments happen, we need to provide a forum to explore those ideas, judge them on their merits, and distinguish the extraordinary from the merely good. Once a year, Nokia Bell La...
nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate
A heap-based buffer overflow was found in the NSCEncryptUpdate function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application compiled with nss. While the attack complexi...
UBUNTU-CVE-2020-6444
Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
MS15-081: Description of the security update for Word 2016: October 13, 2015
Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office...
Unauthorized Access Vulnerability in PoE Infrared Webcam of P&L Technologies Ltd.
hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. TP-LINK's PoE infrared webcam has an unauthorized access vulnerability, which can be exploited by attackers to directly steal real-time video streams by constructing usernames and passwords at...
Chromepass - Hacking Chrome Saved Passwords
Chromepass is a python-based console application that generates a windows executable with the following features: Decrypt Chrome saved paswords Send a file with the login/password combinations remotely email or reverse-http Custom icon Completely undetectable by AntiVirus Engines AV Detection! Du...
nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate
A heap-based buffer overflow was found in the NSCEncryptUpdate function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application compiled with nss. While the attack complexi...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2020-10264
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE Real-Time Data Exchange interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot...
CVE-2020-10264
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE Real-Time Data Exchange interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot...
Code injection
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE Real-Time Data Exchange interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot...
The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a hacker to access confidential information.
The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks involves exposing IGMP information through a special report. Exploiting this vulnerability can allow attackers to access confidential information...
CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP Access Control Error Vulnerability
CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP is a baby surveillance camera. A security vulnerability exists in the CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP using firmware version 3.4.2.0919. The vulnerability can be exploited by an attacker to access the RTSP service without...