Germany Bans Facebook From Collecting WhatsApp Data

Just last month, the most popular messaging app WhatsApp updated its privacy policy and T&Cs to start sharing its user data with its parent company, and now both the companies are in trouble, at least in Germany and India. Both Facebook, as well as WhatsApp, have been told to immediately stop...

Multiple Reflective Cross-Site Scripting Vulnerabilities in BINOM3 Electric Power Quality Meter

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. BINOM3 Electric Power Quality Meter suffers from multiple reflected cross-site scripting vulnerabilities. These vulnerabilities can be exploited to inject arbitrary JavaScript at a specially crafted URL,...

CVE-2016-1000219

A flaw was found in Kibana's logging functionality. If custom logging output was configured in Kibana, private user data could be written to the Kibana log files. A system attacker could use this data to hijack sessions of other users when using Kibana behind some form of authentication such as...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise Kibana security update

An update for Red Hat OpenShift Enterprise Kibana images is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

PHP 'ext/gd/gd.c' Heap Buffer Overflow Vulnerability

PHP is an open source general-purpose computer scripting language. PHP 'ext/gd/gd.c' suffers from a heap buffer overflow vulnerability due to the program failing to adequately filter user-supplied data. Allowing an attacker to exploit the vulnerability would allow execution of arbitrary script co...

CVE-2016-6345

It was found that there was insufficient use of randam values in RESTEasy async jobs. An attacker could use this flaw to steal user data. Mitigation Dont enable Async Jobs Service as details in the section, "2.10. RESTEASY ASYNCHRONOUS JOB SERVICE" of JBoss EAP 7 Developing Web Services...

Privacy Groups File FTC Complaint over WhatsApp Data Sharing with Facebook

Alleging a trail of broken promises, two privacy-focused advocacy groups yesterday filed a complaint with the Federal Trade Commission against a recent WhatsApp privacy policy change that states it will begin sharing user data with parent company Facebook. The Electronic Privacy Information Cente...

Opera's browser synchronization service hacked, user data and stored passwords leaked-vulnerability warning-the black bar safety net

8 month 2 6 day night, the well-known browser vendor Opera's announcement represents its cloud synchronization service suffered a hacker attack, open a browser synchronization feature of the user will be affected. ! Opera Company of a station for storing the user data synchronization server is...

WhatsApp to Share Your Data with Facebook — You have 30 Days to Stop It

Nothing comes for Free, as "Free" is just a relative term used by companies to develop a strong user base and then use it for their own benefits. The same has been done by the secure messaging app WhatsApp, which has now made it crystal clear that the popular messaging service will begin sharing...

CVE-2016-6364

The User Data Services UDS API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified API calls, aka Bug ID CSCux67855...

Cisco Unified Communications Manager Information Disclosure Vulnerability (cisco-sa-20160817-ucm)

A vulnerability in the User Data Services UDS Application Programming Interface API for Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view confidential information that should require authentication. SPDX-FileCopyrightText: 2016 Greenbone AG Some text...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2016-06424)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An information disclosure hole exists in the...

UBUNTU-CVE-2014-9879

The mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769221 and Qualcomm internal bug CR524490...

Brazil Freezes $11.7 Million of Facebook Funds for Not Complying with Court Orders

Facebook's legal war with Brazilian government seems to be never-ending. Facebook-owned cross-platform messaging service WhatsApp has already been blocked a total of three times in Brazil since December for failing to comply with a court order asking the company to access WhatsApp data under...

Apple OS X Login Window Arbitrary Code Execution Vulnerability

Apple OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in the Login Window of Apple OS X, which can be exploited by attackers to obtain sensitive user information or execute arbitrary code...

Pornhub Hack Earns Researchers $22,000

A PHP vulnerability that exposed adult website PornHub’s user data to hackers and allowed for code execution on servers hosting the site, earned a trio of German researchers $22,000 as part of a bug bounty program. PHP patched the vulnerability in June. The flaw is tied to a use-after-free memory...

Verizon Set to Buy Yahoo for $5 Billion — Here's Why a Telecom is so Interested!

Finally, Someone has come forward to buy Yahoo! Guess Who? The telecommunication giant Verizon. Yes, Verizon Communications Inc. is reportedly closing in on a deal to acquire Yahoo’s core business for about $5 Billion, according to a report from Bloomberg. Since the agreement between the companie...

Potential vulnerability in Intel® SSD Data Center Family for SATA - Lenovo Support NL

No description provided...

Ancient streaming media system /VIEWGOOD/ADI/portal/UserDataSync. aspx file UserGUID parameter SQL injection vulnerability

No description provided by source...

Vtiger CRM does not properly restrict access to application data

Overview Vtiger CRM is a customer relationship management CRM software. Vtiger CRM contains a vulnerability where it does not properly restrict access to user information data. Hirota Kazuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with th...