CVE-2020-27612: Exposure of Sensitive Information to an Unauthorized Actor

Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window...

PT-2020-16722

Name of the Vulnerable Software and Affected Versions BigBlueButton versions 2.2.8 through 2.2.28 Description The issue concerns an unintended information leak. Usernames are placed in room URLs, which may leak information to users in the same room or to outsiders if a user publishes a screenshot...

livingroomcandidate.org Improper Access Control vulnerability OBB-1389820

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-3143

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software, Cisco TelePresence Codec TC Software, and Cisco RoomOS Software could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is...

Insider Attack on the Carnegie Library

Greg Priore, the person in charge of the rare book room at the Carnegie Library, stole from it for almost two decades before getting caught. It's a perennial problem: trusted insiders have to be trusted...

Teens arrested after paying Bitcoin to watch livestream abuse & murder

By Waqas The tale of dark web's disturbing Red Room has been revealed by... This is a post from HackRead.com Read the original post: Teens arrested after paying Bitcoin to watch livestream abuse & murder...

CAYIN Technology xPost SQL Injection Vulnerability

CAYIN Technology xPost is a digital signage system for conference room management from CAYIN Technology in Taiwan, China. A SQL injection vulnerability exists in CAYIN Technology xPost 2.5 and prior versions. The vulnerability stems from a database-based application that lacks validation of...

Qik Chat 3.0 Command Injection

Document Title: =============== Qik Chat v3.0 iOS - Name Command Inject Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2247 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 224...

File Upload Vulnerability in Rmeeting Room Management System

Rmeeting Conference Room Management System is a system that provides meeting booking services for corporate meeting rooms, large conference centers, and hotel conference centers. A file upload vulnerability exists in the Rmeeting Conference Room Management System, which can be exploited by an...

AMA Recap: Top 10 Tips to Secure Your Remote Workforce

This is part of our ongoing conversation about the worldwide challenges of working remotely. To stay up-to-date on the latest insights, refer to our live page for COVID-19: Cybersecurity Community Resources. As organizations around the world transition to remote work en masse, cybersecurity...

How Federal Employees Can Protect their Agencies During the Pandemic

It’s no secret that the way the world works has shifted since COVID-19 came on the scene. Operations are going remote and, for many government and federal agencies, this is new territory. This novelty is compounded by the fact that nation-state attacks are—and have been—on the rise for quite some...

Code Execution Vulnerability in Grape Game Room for PC

Grape Game Room is a game center for Smart TVs and Smart Set Top Boxes, providing large-scale Smart TV games, single-player games, two-player games and online games for all players. A code execution vulnerability exists in the PC version of Grape Game Hall, which can be exploited by attackers to...

JVN#88277644: Keijiban Tsumiki vulenrable to OS command injection

Keijiban Tsumiki provided by Mash room - Free CGI - is a CGI to provide Bulletin Board System BBS functions. Keijiban Tsumiki contains an OS command injection vulnerability CWE-78. Impact A remote attacker may execute an arbitrary OS command. Solution Consider stop using Keijiban Tsumiki v1.15...

DEVOME GRR Code Issue Vulnerability

DEVOME GRR is a resource management and reservation system. A code issue vulnerability exists in DEVOME GRR versions prior to 3.4.1c that stems from the admineditroom.php file failing to properly handle file uploads. A remote attacker could exploit this vulnerability to execute code...

Zoom conference room connector service insufficient session invalidation

Summary Zoom Conference Room Connector services perform insufficient session invalidation upon certain user administration tasks which enable a demoted or deleted user to still access the room administration interface. If a user has administrative access to the connected device and if this access...

Shijiazhuang Hejia Technology Co., Ltd. machine room dynamic ring monitoring system has a logic flaw vulnerability

The dynamic environment monitoring system of the server room is the monitoring function of the important environment and power and other equipment in the server room, including environmental equipment monitoring temperature, humidity, smoke, flooding, precision air conditioning, ordinary air...

Shijiazhuang Hejia Technology Co., Ltd. machine room dynamic ring monitoring system has information leakage vulnerability

The dynamic environment monitoring system of the server room is the monitoring function of the important environment and power and other equipment in the server room, including environmental equipment monitoring temperature, humidity, smoke, flooding, precision air conditioning, ordinary air...

Shijiazhuang Hejia Technology Co., Ltd. computer room dynamic ring monitoring system has SQL injection vulnerability

The dynamic environment monitoring system of the server room is the monitoring function of the important environment and power and other equipment in the server room, including environmental equipment monitoring temperature, humidity, smoke, flooding, precision air conditioning, ordinary air...

FreeBSD : py-matrix-synapse -- multiple vulnerabilities (ed8cbad5-21a8-11ea-9b6d-901b0e934d69)

Matrix developers report : The synapse 1.7.1 release includes several security fixes as well as a fix to a bug exposed by the security fixes. All previous releases of Synapse are affected. Administrators are encouraged to upgrade as soon as possible. - Fix a bug which could cause room events to b...

py-matrix-synapse -- multiple vulnerabilities

Matrix developers report: The synapse 1.7.1 release includes several security fixes as well as a fix to a bug exposed by the security fixes. All previous releases of Synapse are affected. Administrators are encouraged to upgrade as soon as possible. Fix a bug which could cause room events to be...