Binary Vulnerability in Shenzhen Xunlei.com Culture Co.

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58847)

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58851)

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58852)

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58848)

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58849)

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

Every Application Should Be Behind a WAF

It's no secret that security threats continue to expand in volume and variety, making headlines on virtually a daily basis. From nation-state attacks, corporate espionage, and data exfiltration campaigns to all-in-one and sneaker bot campaigns, businesses across the globe find themselves dealing...

Western Digital My Cloud Multiple Products < 2.12.127 / 2.20 - 2.30 < 2.31.149 Multiple Vulnerabilities

Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Zero Trust deployment guide for your applications

Introduction More likely than not, your organization is in the middle of a digital transformation characterized by increased adoption of cloud apps and increased demand for mobility. In the age of remote work, users expect to be able to connect to any resource, on any device, from anywhere in the...

GLSA-202008-09 : Shadow: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202008-09 Shadow: Privilege escalation When Shadow was installed with the PAM use flag, setuid binaries provided by Shadow were not properly restricted. Impact : A local attacker could escalate privileges to root. Workaround : The...

Shadow: Privilege escalation

Background Shadow is a set of tools to deal with user accounts. Description When Shadow was installed with the PAM use flag, setuid binaries provided by Shadow were not properly restricted. Impact A local attacker could escalate privileges to root. Workaround There is no known workaround at this...

Microsoft and Corrata integrate to extend cloud app security to mobile endpoints

This blog post is part of the Microsoft Intelligence Security Association guest blog series. To learn more about MISA, go here. The growth of mobile and remote work and the emergence of the “post perimeter” world has made keeping track of shadow IT a huge challenge for enterprise IT teams. What...

SUSE-SU-2020:2235-1 Security update for libreoffice

This update for libreoffice fixes the following issues: - Update to 6.4.5.2: Various fixes all around - Remove mime-info and application-registry dirs bsc1062631 - Fix bsc1172053 - LO-L3: Image disappears during roundtrip 365-Impress-365 bsc1172053.diff - Fix bsc1172189 - LO-L3: Impress crashes...

SUSE-SU-2020:2217-1 Security update for libreoffice

This update for libreoffice fixes the following issues: - Update to 6.4.5.2: Various fixes all around - Remove mime-info and application-registry dirs bsc1062631 - Fix bsc1172053 - LO-L3: Image disappears during roundtrip 365-Impress-365 bsc1172053.diff - Fix bsc1172189 - LO-L3: Impress crashes...

SkyArk - Helps To Discover, Assess And Secure The Most Privileged Entities In Azure And AWS

SkyArk is a cloud security project with two mainscanning modules: 1. AzureStealth - Scans Azure environments 2. AWStealth - Scan AWS environments These two scanning modules will discover the most privileged entities in the target AWS and Azure. The Main Goal - Discover The Most Privileged Cloud...

USN-4298-2 sqlite3 vulnerabilities

USN-4298-1 fixed several vulnerabilities in SQLite. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cause SQLite to crash, resulting in a...

broker: resetUsers operation stores password in plain text

A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file etc/artemis-users.properties file when executing the resetUsers operation. A local attacker can use this flaw to read the...

ALPINE-CVE-2020-15563

An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HV...

CVE-2020-15563

An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HV...

UBUNTU-CVE-2020-15563

An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HV...