7027 matches found
CVE-2021-28130
Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a legitimate binary e.g., frwlsvc.exe bypasses firewall filters...
New Android Malware Targeting US, Canadian Users with COVID-19 Lures
An "insidious" new SMS smishing malware has been found targeting Android mobile users in the U.S. and Canada as part of an ongoing campaign that uses SMS text message lures related to COVID-19 regulations and vaccine information in an attempt to steal personal and financial data. Proofpoint's...
colourful-apps.com Cross Site Scripting vulnerability OBB-2147720
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: Aspera Web Applications (Shares, Console) are affected by OpenSSL Vulnerabilities (CVE-2021-23839, CVE-2021-23840, CVE-2021-23841)
Summary Aspera Web Applications Shares, Console have addressed the following OpenSSL Vulnerabilities. Vulnerability Details CVEID: CVE-2021-23839 DESCRIPTION: OpenSSL could provide weaker than expected security, caused by incorrect SSLv2 rollback protection that allows for the inversion of the...
Security Updates for Microsoft Office Web Apps (September 2021)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for th...
Launching multiple virtual apps and desktops using Citrix Workspace App for Mac is failing on macOS 11.6
Apple has released a new version of macOS Big Sur 11.6. Launching multiple virtual apps and virtual desktops using Citrix Workspace App for Mac is failing on this version of macOS. Note : Launching just one virtual app or virtual desktop using Citrix Workspace App for Mac should work fine on macO...
Description of the security update for Office Web Apps Server 2013: September 14, 2021 (KB5002009)
None None...
September 14, 2021—KB5005575 (OS Build 20348.230)
None None...
Microsoft Office 缓冲区错误漏洞
Microsoft Office Visio is the software responsible for drawing flowcharts and schematics in the Office software family of Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Office Visio. The following products and editions are affected:Microsoft Office 2019 for 32-bit...
PT-2021-6974 · Microsoft · Office Powerpoint +2
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Office and Microsoft 365 Apps for...
Microsoft Office 缓冲区错误漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A buffer error vulnerability exists in Microsoft Office. The following products and editions...
Microsoft Office 代码注入漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and version...
Microsoft Office 信息泄露漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. An information disclosure vulnerability exists in Microsoft Office. The following products a...
Microsoft Office 资源管理错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Office Excel. The following products and editions are affected: Microsoft Excel 2016 32-bit edition,Microsoft Excel 2016 64-bit...
Designing Contact-Tracing Apps
Susan Landau wrote an essay on the privacy, efficacy, and equity of contract-tracing smartphone apps. Also see her excellent book on the topic...
CVE-2021-25453
Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information...
SAMSUNG SMR 安全漏洞
SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. A security vulnerability exists in SAMSUNG SMR, which originated prior to the September 2021 release of SMR, in which some improper access controls exist in th...
Power Apps OData Feeds Detected
Microsoft Power Apps is a low-code development platform designed to help users build rich web and mobile applications. Power Apps enables users to publish table data as OData feeds, providing a RESTful web service by default available to any user. The scanner detected the presence of public data ...
Zoho Releases Security Update for ADSelfService Plus
Zoho has released a security update on a vulnerability CVE-2021-40539 affecting ManageEngine ADSelfService Plus builds 6113 and below. CVE-2021-40539 has been detected in exploits in the wild. A remote attacker could exploit this vulnerability to take control of an affected system. ManageEngine...
A week in security (August 30 – September 5)
Last week on Malwarebytes Labs ProxyToken: another nail-biter from Microsoft Exchange Macs turn on apps signed by Symantec, treat them as malware Google Play sign-ins can be abused to track another person’s movements FTC bans SpyFone and its CEO from continuing to sell stalkerware BrakTooth...