2833 matches found
tech-power.ro Cross Site Scripting vulnerability OBB-1258682
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-9528
Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...
CVE-2020-9529
CVE-2020-9529 affects firmware by Shenzhen Hichip Vision Technology (V6–V20) used in numerous brands (e.g., Accfly, Anlink, D3D Security, Tenvis, ZILINK, etc.). The vulnerability enables privilege escalation from the local network, allowing an attacker to reset the device administrator password. ...
CVE-2020-9528
CVE-2020-9528 involves firmware from Shenzhen Hichip Vision Technology (V6–V20) used across multiple IoT devices. The reported issue is cryptographic in nature and enables remote attackers to access user session data, demonstrated by eavesdropping on video/audio streams, capturing credentials, an...
CVE-2020-9527
CVE-2020-9527 concerns firmware by Shenzhen Hichip Vision Technology (V6–V20, post-2018-08-09 to 2020) used across many IoT devices under numerous brands. The vulnerability is a buffer overflow in the P2P service that allows unauthenticated remote attackers to execute arbitrary code. Affected pro...
tech-corp.ru Cross Site Scripting vulnerability OBB-1237537
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Afternoon Cyber Tea: Peak, Plateau, or Plummet? Cyber security trends that are here to stay and how to detect and recover from ransomware attacks
The rapidity of change in the cyberthreat landscape can be daunting for today’s cyber defense teams. Just as they perfect the ability to block one attack method, adversaries change their approach. Tools like artificial intelligence and machine learning allow us to pivot quickly, however, knowing...
tech-nik.nl Cross Site Scripting vulnerability OBB-1229622
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
This Week in Security News: Trend Micro Research Discovers Cybercriminal Turf War on Routers and a Massive Twitter Breach Compromises Some of the World’s Most Prominent Accounts
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about Trend Micro’s report on the botnet battle for IoT territory and how attacker groups are trying to gain control of vulnerable...
Command Execution Vulnerability in SSH of UPS Management Module at VitiTech Ltd.
VitiTech is an uninterruptible power supply, automation control equipment and industrial battery company. A command execution vulnerability exists in SSH, the UPS management module of Verti Technologies Ltd. The vulnerability can be exploited to remotely execute system shell commands bypassing...
Converting MBOX to Outlook Easily
Mail transfer is a common search query. Most commonly, users may migrate due to personal preferences, corporate policies, or support issues. Systems based on the MBOX format are tricky: you may easily export the files, but direct import to Outlook is impossible. That is unless you use the right...
Hong Kong's Security Law Puts Big Tech at a Crossroads
As China exerts more power over the city, companies like Facebook and Google have stopped handing over data—for now...
DSA Is Past Its Prime
I want to start by acknowledging that tech is not the most important thing happening around me at the moment. Its critical to understand our role in fixing the issues in the system we are part of. I found that Russ Cox captured that message very well in a recent email to golang-nuts, you should...
tech-rx.vc Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1213966 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Nationwide Facial Recognition Ban Proposed By Lawmakers
Lawmakers have proposed legislation that would indefinitely ban the use of facial recognition technology by law enforcement nationwide. The new bill comes after months of public concerns surrounding facial recognition’s implications for data privacy, government surveillance and racial bias. The...
New Bill Targeting ‘Warrant-Proof’ Encryption Draws Ire
Privacy advocates are decrying a new bill, which would force tech companies to unlock encrypted devices if ordered to do so by law enforcement with a court issued warrant. The Lawful Access to Encrypted Data Act was introduced on Tuesday by Senate Judiciary Committee Chairman Lindsey Graham R-SC,...
DEBIAN-CVE-2020-15007
A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...
CVE-2020-15007
A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...
CVE-2020-15007
A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...
CVE-2020-15007
A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...