11808 matches found
Pray.com exposed data of millions after database mess up
By Deeba Ahmed Pray.com applied lackluster security practices potentially exposing nearly 10 million users to frauds and cyberattacks, claim VpnMentor's researchers. This is a post from HackRead.com Read the original post: Pray.com exposed data of millions after database mess up...
Fixed in Apache Tomcat 9.0.40
Important: Information disclosure CVE-2021-24122 When serving resources from a network location using the NTFS file system it was possible to bypass security constraints and/or view the source code for JSPs in some configurations. The root cause was the unexpected behaviour of the JRE API...
@decentralized-identity/sidetree (>=0.10.0-unstable.0042dcd, <=1.0.1), spec-up (>=0.9.0, <=0.10.1) +2 more potentially affected by unknown CVE via markdown-it-prism (>=2.0.3, <=2.1.2)
markdown-it-prism NPM version =2.0.3, =0.10.0-unstable.0042dcd, =0.9.0, =1.1.11, =0.10.1, =0.11.1-preview.1 Source cves: unknown CVE Source advisory: SNYK:JS-MARKDOWNITPRISM-1040462...
An Engineer Gets 9 Years for Stealing $10M From Microsoft
The defendant tried—and failed—to use bitcoin to cover his tracks...
Receiver Clean-Up Utility
Important Notes Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools --- Receiver cleanup utility is not required while upgrading to the Receiver forWindows 4.4 or newer. Receiver for Window...
up-front.com Improper Access Control vulnerability OBB-1494721
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security update for tomcat (moderate)
openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2020:1842-1 Rating: moderate References: 1177582 Cross-References: CVE-2020-13943 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tomcat...
openSUSE: Security Advisory for tomcat (openSUSE-SU-2020:1842-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61031)
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. An unspecified vulnerability exists in Apple macOS Catalina. The vulnerability stems from the possibility that a Mac may not lock immediately upon wakeup. No details of the vulnerability are provided...
CVE-2020-25673
A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
...
CVE-2020-25673
A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...
openSUSE Security Update : tomcat (openSUSE-2020-1799)
This update for tomcat fixes the following issues : - CVE-2020-13943: Fixed HTTP/2 Request mix-up bsc1177582 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...
OPENSUSE-SU-2020:1799-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up bsc1177582 This update was imported from the SUSE:SLE-15-SP2:Update update project...
just-make-up-shop.ru Cross Site Scripting vulnerability OBB-1467712
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Genexis Platinum-4410 Cross-Site Scripting Vulnerability
The Genexis Platinum-4410 is a wireless router from Genexis UK. The Genexis Platinum-4410 P4410-V2-1.28 device suffers from a cross-site scripting vulnerability that can be exploited by an attacker to perform malicious actions, where an XSS pop-up will affect all privileged users...
CVE-2020-27740
Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread...
SUSE-SU-2020:3068-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up bsc1177582...
2020 DDoS Extortion Campaign -- A Sequel More Thrilling Than the Original
Costarring Susan McReynolds and Tom Emmons As you might imagine, as the go-to enterprise DDoS mitigation experts, our phones have been "ringing off the hook" as the global extortion DDoS campaign sequel rages on. It's bigger, badder, and features a broader cast of criminal characters than seen...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58749)
MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the Server: Optimizer component in Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this vulnerability to cause MySQL Server to hang ...