Design/Logic Flaw

reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...

Design/Logic Flaw

reset/modules/fotoliaFoto/multiupload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file...

CVE-2019-19594

The CVE-2019-19594 entry applies to PrestaShop 1.6 and 1.7 with the RESET.PRO Adobe Stock API Integration, via the file reset/modules/fotoliaFoto/multi_upload.php. The vulnerability allows remote code execution by uploading a PHP file, indicating a file-upload handling flaw in the integration com...

CVE-2019-19595

The CVE-2019-19595 issue affects the PrestaShop integration: RESET.PRO Adobe Stock API integration 4.8, specifically the file reset/modules/advanced_form_maker_edit/multiupload/upload.php. The root cause is a file upload vulnerability in the multiupload component that allows remote attackers to u...

PT-2019-15881

Name of the Vulnerable Software and Affected Versions RESET.PRO Adobe Stock API integration version 4.8 for PrestaShop Description The issue allows remote attackers to execute arbitrary code by uploading a .php file through the 'reset/modules/advanced form maker edit/multiupload/upload.php'...

PT-2019-15880

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.6 and 1.7 Description The issue allows remote attackers to execute arbitrary code by uploading a .php file through the reset/modules/fotoliaFoto/multi upload.php endpoint in the RESET.PRO Adobe Stock API Integration...

Adobe Stock CVE-2019-19595 Remote Code Execution Vulnerability

Description Adobe Stock is prone to remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected system. Technologies Affected Adobe Stock 4.8 PrestaShop PrestaShop 1.4 PrestaShop PrestaShop 1.6.0 Recommendations Deploy netwo...

CVE-2019-19594: Unrestricted Upload of File with Dangerous Type

reset/modules/fotoliaFoto/multiupload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file...

CVE-2019-19595: Unrestricted Upload of File with Dangerous Type

reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...

The Disgruntled Employee?

When we talk about cyber threat actors one of the terms we use is “Disgruntled Employee”. Everyone knows what that means; someone who is fed up at work, has an axe to grind, feels aggrieved etc. There are sometimes other factors though, ones that aren’t as obvious… The symptoms and effects I was...

ThreatList: Data Breaches Batter Stock Prices at Public Companies, For Months

Much has been made of the fallout that companies face after a data breach. But for public companies, shaken investor confidence adds a whole new dimension to recovery concerns. A recent study from Comparitech shows that share prices for large breached companies will hit a low point approximately ...

Wanted: Cybersecurity Imagery

Eli Sugarman of the Hewlettt Foundation laments about the sorry state of cybersecurity imagery: The state of cybersecurity imagery is, in a word, abysmal. A simple Google Image search for the term proves the point: It's all white men in hoodies hovering menacingly over keyboards, green...

Privacy Experts: Facebook's $5B Fine Unlikely to Do Much

The $5 billion fine that the Federal Trade Commission has slapped on Facebook for privacy violations may be the largest ever levied by the agency, but it’s being derided as “chump change” and ineffective by lawmakers and privacy analysts. The settlement, reported Friday evening, stems from...

Xiaomi Redmi Note 5 Pro Xiaomi Stock Browser Information Disclosure Vulnerability

Xiaomi Redmi Note 5 Pro is a smartphone from Chinese company Xiaomi Technology Xiaomi.Xiaomi Stock Browser is one of the stock browsers. An information disclosure vulnerability exists in version 10.2.4.g of the Xiaomi Stock Browser in the Xiaomi Redmi Note 5 Pro. The vulnerability stems from an...

CVE-2018-20523

Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query...

CVE-2018-20523

CVE-2018-20523 affects Xiaomi Stock Browser 10.2.4.g on Redmi Note 5 Pro and other Redmi Android phones. The issue is a content provider injection in the vulnerable component com.android.browser.searchhistory, allowing a third‑party app to read the user’s cleartext browser history via a query to ...

PT-2019-10102

Name of the Vulnerable Software and Affected Versions: Xiaomi Stock Browser version 10.2.4.g Description: The issue allows a third-party application to read the user's cleartext browser history. This can be achieved via an app.provider.query request to the...

CVE-2018-20523: Improper Neutralization of Special Elements used in a Command

Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query...

WINDOWS 10 IOT CORE remote command execution vulnerability verification and recommendations-vulnerability warning-the black bar safety net

1, Overview Recently, Ann days of microelectronics and embedded security development Department, Security days micro block for SafeBreach1the company's disclosure of the Windows IoT2operating systemthe security vulnerabilities carried out a detailed analysis and validation. An attacker exploiting...

ThreatList: $1.7M is the Average Cost of a Cyber-Attack

The average cost estimate for cleaning up a cyberattack comes in at around $1.1 million, according to a recent survey. But this is actually a rosy view: For those organizations that actually calculate versus estimate the real cost of an attack, that number increases significantly to $1.67 million...