Finding 0-days with Jackalope

ARCHIVED STORY Finding 0-days with Jackalope By Douglas McKee · September 16, 2021 Overview On March 21st, 2021, the McAfee Enterprise Advanced Threat Research ATR team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by...

Finding 0-days with Jackalope

ARCHIVED STORY Finding 0-days with Jackalope By Douglas McKee · September 16, 2021 Overview On March 21st, 2021, the McAfee Enterprise Advanced Threat Research ATR team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by...

Detecting PrintNightmare Exploit Attempts using Trend Micro Vision One and Cloud One

We look into the different implementations of PrintNightmare and include recommendations on how security teams can safeguard their workloads...

Spotting brand impersonation with Swin transformers and Siamese neural networks

Every day, Microsoft Defender for Office 365 encounters millions of brand impersonation emails. Our security solutions use multiple detection and prevention techniques to help users avoid divulging sensitive information to phishers as attackers continue refining their impersonation tricks. In thi...

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based machine vision systems lies in the insufficient encryption strength, allowing attackers to compromise protected information and carry out “insider attacks”.

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based vision systems is related to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to disclose protected information and carry out “insider attacks”...

XDR Security : More Security. More Savings.

You don’t have to sacrifice security for savings. Discover the business, security, and financial benefits of the XDR capabilities of Trend Micro Vision One in the ESG Economic Validation report...

SQL Injection Vulnerability in the Integrated Management System of Beijing Smart Vision Technology Industry Co.

Beijing Intelligent Vision Technology One Card Integrated Management System is a private cloud platform with Intelligent Vision Intelligent Identification Control Platform as the core engine. Beijing Intelligent Vision Technology Industry Co., Ltd. one card integrated management system there is a...

Weak password vulnerability in H5S video platform of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co., Ltd. is a software company specializing in the research, development and service of video IoT technology. A weak password vulnerability exists in the H5S video platform of ZeroVision Technology Shanghai Co. Ltd, which can be exploited by attackers to obtain...

NVIDIA Jetson Chipsets Found Vulnerable to High-severity Flaws

U.S. graphics chip specialist NVIDIA has released software updates to address a total of 26 vulnerabilities impacting its Jetson system-on-module SOM series that could be abused by adversaries to escalate privileges and even lead to denial-of-service and information disclosure. Tracked from...

Logic Flaw Vulnerability in NM3000 Network Element Management System

DDPV is a wholly owned subsidiary of DigitalVision Group, specializing in the research and development, production, marketing and service of coaxial broadband access technology and optical communication technology. A logic flaw vulnerability exists in the NM3000 network element management system,...

Command Execution Vulnerability in UCM Collaborative Communication Platform of Beijing Zhongchuang Vision Technology Co. Ltd (CNVD-2021-43039)

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. A command execution vulnerability exists in the UCM collaborative communication platform of Beijing Zhongchuang Vision Technology Co., Ltd, which can be exploited by an...

The vulnerability of the data structure saving function in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a hacker to execute arbitrary code.

The vulnerability of the data structure saving function in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor...

SQL Injection Vulnerability in the Integrated Management System of Beijing Smart Vision Technology Industry Co.

Beijing Wisdom Vision Technology Industry Co., Ltd. is a participant in the drafting of national standards for smart city and one-card, and is a leading provider of Internet one-card overall solutions in China with more than ten years of experience in the field of one-card technology and the...

Unauthorized Access Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co., Ltd (CNVD-2021-39820)

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. An unauthorized access vulnerability exists in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by attacker...

Unauthorized Access Vulnerability in the Management System of HIM Basic Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. An unauthorized access vulnerability exists in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by attacker...

Directory Traversal Vulnerability in Huijitong Cloud Vision of Beijing Zhongchuang Vision Technology Co.

Huijitong CloudVision is an operation-level cloud video platform developed by Beijing Zhongchuang Vision Technology Co., Ltd, which can simultaneously satisfy the zero distance of enterprise communication and collaboration. A directory traversal vulnerability exists in Huijitong CloudVision, whic...

Arbitrary File Download Vulnerability in Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

The business scope of Beijing Zhongchuang Vision Technology Co., Ltd. includes: technology development of communication equipment; technology development, technology transfer, technology consulting and technology service of electronic products; software development; sales of communication...

Information Leakage Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an information leakage vulnerability in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by...

CVE-2021-30046

VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx readimageband function, in which a crafted file can cause a denial of service...

Design/Logic Flaw

VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx readimageband function, in which a crafted file can cause a denial of service...