CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

Authorization Bypass in graphql-shield

Versions of graphql-shield prior to 6.0.6 are vulnerable to an Authorization Bypass. The rule caching option nocache relies on keys generated by cryptographically insecure functions, which may cause rules to be incorrectly cached. This allows attackers to access information they should not have...

@atto-byte/yoga (>=0.6.0 <=0.6.6), @britishcouncil/grizzly (>=0.1.0 <=0.3.3) +22 more potentially affected by unknown CVE via graphql-shield (>=3.2.5 <=5.7.3)

graphql-shield NPM version =3.2.5, =0.6.0, =0.1.0, =1.0.2-alpha.11, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.0.6, =0.0.0, =0.0.1, =1.0.0, =0.0.5, =0.0.1, =0.0.2 - ustart =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HX78-272P-MQQH...

GHSA-HX78-272P-MQQH Authorization Bypass in graphql-shield

Versions of graphql-shield prior to 6.0.6 are vulnerable to an Authorization Bypass. The rule caching option nocache relies on keys generated by cryptographically insecure functions, which may cause rules to be incorrectly cached. This allows attackers to access information they should not have...

So Long, Privacy Shield

In whats rapidly becoming the splashiest news to hit the privacy space in years, the Court of Justice of the EU CJEU, the highest court in the European Union, invalidated the U.S. Privacy Shield, a legal instrument that made it possible for organizations operating in the United States to transfer...

AWS suffers largest ever DDoS attack of 2.3 TBPS

By Waqas The DDoS attack was mitigated by AWS Shield DDoS protection service. This is a post from HackRead.com Read the original post: AWS suffers largest ever DDoS attack of 2.3 TBPS...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System (CNVD-2020-33194)

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

System reinstallation vulnerability in Shield Spirit 1.0

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

WordPress M-Shield plugin - Fake plugin/backdoor

Fake plugin/backdoor discovered by Sucuri under the name M-Shield. Solution Delete asap + look up for possible additional malicious files on the server...

M-Shield & kingof - Fake Malware Backdoor Plugins

Sucuri Labs found that the M-Shield & kingof fake WordPress plugins were used as malware droppers, with the initial compromise likely coming from another legitimate vulnerable WordPress plugin security vulnerability...

D Shield of Shenzhen DiYuan Technology Co., Ltd. suffers from webshell bypass vulnerability (CNVD-2020-23537)

D ShieldFirewall is an active defense protection software designed for IIS. D-Shield has a webshell bypass vulnerability, which can be exploited by attackers to bypass detection and gain access to the control privileges of the target server...

Webshell bypass vulnerability exists in D Shield (CNVD-2020-21033)

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain access to the...

SQL Injection Bypass Vulnerability in D-Shield

D ShieldFirewall is an active defense protection software designed for IIS. D-Shield suffers from an SQL injection bypass vulnerability that can be exploited by attackers to obtain sensitive database information...

Webshell Bypass Vulnerability in D-Shield_Firewall (CNVD-2020-22798)

D ShieldFirewall is a free IIS firewall software. DShieldFirewall suffers from a Webshell bypass vulnerability. An attacker can exploit this vulnerability to gain administrative privileges on a website...

SQL Injection Bypass Vulnerability in D-Shield Firewall (CNVD-2020-22267)

D Shield Firewall is a free IIS firewall software. D Shield Firewall suffers from a SQL injection bypass vulnerability. An attacker can exploit this vulnerability to gain access to sensitive database information...

Webshell bypass vulnerability exists in D-Shield (CNVD-2020-22799)

D Shield is a proactive defense protection software designed specifically for IIS. D-Shield suffers from a Webshell bypass vulnerability that can be exploited by attackers to gain administrative privileges on a website...

Webshell bypass vulnerability exists in D Shield (CNVD-2020-22802)

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to gain control of the target server...

D Shield suffers from a webshell bypass vulnerability (CNVD-2020-22801)

D-Shield is an active defense protection software designed specifically for IIS to prevent websites and servers from being compromised with internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain acce...

Webshell bypass vulnerability exists in D Shield (CNVD-2020-22804)

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to gain control of the target server...