Swift File Transfer Mobile Cross Site Scripting / Information Disclosure

Document Title: =============== Swift File Transfer Mobile - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2205 Release Date: ============= 2020-04-17 Vulnerability Laboratory ID VL-ID: ====================================...

Crescendo - A Swift Based, Real Time Event Viewer For macOS - It Utilizes Apple's Endpoint Security Framework

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework. Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1.- Ensure that you have moved the app to your /Applications director o...

Crescendo: Real Time Event Viewer for macOS

Prior to 2017, researchers couldn’t easily monitor actions performed by a process on macOS and had to resort to coding scripts that produced low level system call data. FireEye released Monitor.app in 2017 that enabled collection of information on macOS at a higher level; at a simplified data set...

CVE-2013-7109

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

HTTP Request Smuggling

Overview apple/swift-nio is an event-driven network application framework for high performance protocol servers & clients, non-blocking. Affected versions of this package are vulnerable to HTTP Request Smuggling. HTTP request smuggling is possible using malformed Transfer-Encoding header...

Security Bulletin: Various security vulnerabilities in IBM Financial Transaction Manager for SWIFT Services

Summary Various security vulnerabilities in IBM Financial Transaction Manager for SWIFT Services could allow a remote attacker to gain access to unauthorized actions and data. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: In Dojo Toolkit before 1.14, there is unescaped string injection...

Swift Compressor Software suffers from dll hijacking vulnerability

Swift compression software is an efficient and intelligent picture compression, PDF compression, video compression software. Support batch compression, lossless compression, effectively solve the problem of oversized files. Swift Compressor has a dll hijacking vulnerability that can be exploited ...

IBM Financial Transaction Manager for SWIFT Services Cross-Site Request Forgery Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from IBM, USA. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. A cross-site request forgery vulnerability exists in IBM Financial Transaction...

IBM Financial Transaction Manager for SWIFT Services Information Disclosure Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from IBM, USA. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. An information disclosure vulnerability exists in IBM Financial Transaction...

IBM Financial Transaction Manager for SWIFT Services Clickjacking Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from IBM in the United States. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. A clickjacking vulnerability exists in IBM Financial Transaction...

IBM Financial Transaction Manager for SWIFT Services Cross-Site Scripting Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from IBM, USA. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. A cross-site scripting vulnerability exists in IBM Financial Transaction Manager...

Xunjie CAD Converter installer is vulnerable to dll hijacking

Swift CAD Converter is a CAD version converter and PDF to CAD software. A dll hijacking vulnerability exists in the Swift CAD Converter installer. An attacker can exploit this vulnerability to execute arbitrary code during program installation...

Swift CAD Editor suffers from dll hijacking vulnerability

Swift CAD Editor is a CAD drawing editing software by ... Swift CAD Editor suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Apple Swift Foundation Component Information Disclosure Vulnerability

Apple Swift is an Apple programming language for macOS, iOS, watchOS, and tvOS.Foundation is one of the frameworks that provides basic system services to all applications. A security vulnerability exists in the Foundation component in Apple Swift versions prior to 5.1.1 for Ubuntu-based platforms...

CVE-2016-9590

An information-disclosure flaw was discovered in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions...

About the security content of Swift 5.1.1 for Ubuntu - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Apple Swift CVE-2019-8790 Information Disclosure Vulnerability

Description Apple Swift is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Apple Swift 3.0 Apple Swift 3.0.1 Apple Swift 3.0.2 Apple Swift 3.1 Apple Swift 3.1.1 Apple Swift 4....

About the security content of Swift 5.1.1 for Ubuntu

About the security content of Swift 5.1.1 for Ubuntu This document describes the security content of Swift 5.1.1 for Ubuntu. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

U.S. Sanctions North Korean Group Behind WannaCry, Sony Hacks

The U.S. has slapped sanctions on three well-known North Korean state-sponsored hacker groups – including the group that was tied to the 2017 WannaCry ransomware attacks and the 2014 cyberattack on Sony Pictures Entertainment. The three that were sanctioned are the infamous Lazarus Group, as well...

US Sanctions 3 North Korean Hacking Groups Accused for Global Cyber Attacks

The United States Treasury Department on Friday announced sanctions against three state-sponsored North Korean hacking groups for conducting several destructive cyberattacks on US critical infrastructure. Besides this, the hacking groups have also been accused of stealing possibly hundreds of...