Binance KYC Data Leak — Crypto Exchange Sets $290,000 Bounty On Blackmailer

Malta-based cryptocurrency exchange Binance has become a victim of a ransom demand from a scammer who claimed to have hacked the KYC Know Your Customer data of thousands of its customers. The unknown attacker threatened the world's largest cryptocurrency exchange by volume to release KYC...

PT-2019-4477 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.10 Description: The issue is related to a use-after-free bug in the Linux kernel, specifically in the drivers/hid/usbhid/hiddev.c driver. This bug can be triggered by a malicious USB device, potentially...

PT-2019-6339 · Pcre +7 · Pcre +7

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 10.34 Description: An out-of-bounds read was discovered in PCRE when the pattern X is JIT compiled and used to match specially crafted subjects in non-UTF mode. This issue affects applications that use PCRE to parse...

July 26, 2019—KB4505903 (OS Build 18362.267)

None None...

Compatibility update for installing Windows 10, version 1903: July 26, 2019

None None...

redis: Heap corruption in lua_cmsgpack.c

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows...

Unspecified Vulnerability in Apple macOS Multiple Component

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the Grapher component of Apple macOS Mojave versions prior to 10.14.6. An attacker can exploit the vulnerability to execute arbitrary code with system privileges...

Unspecified vulnerability in Apple macOS Mojave autofs component

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers. autofs is a file system automount component. A security vulnerability exists in the autofs component of Apple macOS Mojave versions prior to 10.14.6. An attacker could exploit this vulnerability to bypass...

Apple macOS Mojave Time Machine Component Input Validation Error Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Time Machine is one of the system, file backup components. A security vulnerability exists in the Time Machine component in Apple macOS Mojave versions prior to 10.14.6. An attacker could exploit the...

Apple macOS Mojave Carbon Core Component Memory Misreference Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Carbon Core is a C-based component of the Macintosh operating system. A security hole exists in the Carbon Core component of Apple macOS Mojave versions prior to 10.14.6. A remote attacker could exploit this...

UBUNTU-CVE-2019-2850

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

UBUNTU-CVE-2019-2877

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-9815

If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main...

Learn Ethical Hacking From Scratch — 2019 Training Bundle

The world of cybersecurity is fast-paced and ever-changing. New attacks are unleashed every day, and companies around the world lose millions of dollars as a result. The only thing standing in the way of cybercrime is a small army of ethical hackers. These cybersecurity experts are employed to fi...

Compatibility update for installing Windows 10, version 1809: July 22, 2019

None None...

Foxit PhantomPDF Denial of Service Vulnerability (CNVD-2019-24200)

PhantomPDF is a multifunctional PDF editor. A denial of service vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10 when deleting pages from a document containing only one page by calling the "t.hidden = true" function. An attacker can exploit this vulnerability to cause a denial of...

CVE-2019-12988

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 4 of 6...

July 16, 2019—KB4507459 (OS Build 14393.3115)

None None...

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability

SAP BusinessObjects Business Intelligence platform is a suite of bookstore intelligence software and enterprise performance solutions from SAP Germany. The product features report generation, analytics and data visualization. A cross-site scripting vulnerability in the SAP BusinessObjects Busines...

Symantec Messaging Gateway Elevation of Privilege Vulnerability (CNVD-2019-22205)

Symantec Messaging Gateway is a suite of spam filters from Symantec USA. The product features anti-spam, anti-virus, advanced content filtering and data leakage protection. A boost vulnerability exists in Symantec Messaging Gateway versions prior to 10.7.1. An attacker can exploit this...