Design/Logic Flaw

An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST,...

CVE-2018-20100

The CVE-2018-20100 entry concerns August Connect devices where the configuration flow between the August app and August Connect exposes home Wi‑Fi credentials. Root cause: data is transferred over an unencrypted AP and the credentials are sent via HTTP POST using the AugustWifiDevice class, with ...

CVE-2018-20100

An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST,...

Node.js Multiple Vulnerabilities (August 2018 Security Releases)

The version of Node.js installed on the remote host is 6.x prior to 6.14.4, 8.x prior to 8.11.4 or 10.x prior to 10.9.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...

CVE-2016-6328

creationtimestamp| type| source ---|---|--- 2018-11-01 01:58:10+00:00| seen| https://t.me/cibsecurity/979 2025-08-03 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb64eky25...

August 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 (KB 4346083)

August 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 KB 4346083 Summary This article lists the Quality Rollups for .NET Framework 2.0 Service Pack 2 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2.Important All updates...

MS11-025: Description of the security update for Visual C++ 2010 Service Pack 1: August 9, 2011

None None...

Hackers Steal Customers' Credit Cards From Newegg Electronics Retailer

The notorious hacking group behind the Ticketmaster and British Airways data breaches has now victimized popular computer hardware and consumer electronics retailer Newegg. Magecart hacking group managed to infiltrate the Newegg website and steal the credit card details of all customers who enter...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

Threat Roundup for August 31 to September 7

Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we’ve observed this week — covering the dates between Aug. 31 and Sept. 7. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, we will summarize the threats we’ve observed b...

British Airways Hacked – 380,000 Payment Cards Compromised

British Airways, who describes itself as "The World's Favorite Airline," has confirmed a data breach that exposed personal details and credit-card numbers of up to 380,000 customers and lasted for more than two weeks. So who exactly are victims? In a statement released by British Airways on...

CVE-2018-16133

creationtimestamp| type| source ---|---|--- 2018-08-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45303...

haacon.com XSS vulnerability

Open Bug Bounty ID: OBB-670719 Description| Value ---|--- Affected Website:| haacon.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

doslergrup.com XSS vulnerability

Open Bug Bounty ID: OBB-670504 Description| Value ---|--- Affected Website:| doslergrup.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8353

creationtimestamp| type| source ---|---|--- 2018-08-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45279 2025-08-31 03:00:48+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

ww2.watch-series.co XSS vulnerability

Open Bug Bounty ID: OBB-669147 Description| Value ---|--- Affected Website:| ww2.watch-series.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fr.solutions.kompass.com XSS vulnerability

Open Bug Bounty ID: OBB-669111 Description| Value ---|--- Affected Website:| fr.solutions.kompass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dlword.press XSS vulnerability

Open Bug Bounty ID: OBB-669096 Description| Value ---|--- Affected Website:| dlword.press Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

at.kompass.com XSS vulnerability

Open Bug Bounty ID: OBB-669013 Description| Value ---|--- Affected Website:| at.kompass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018

On August 6, 2018, the Vulnerability Coordination team of the National Cyber Security Centre of Finland NCSC-FI and the CERT Coordination Center CERT/CC disclosed vulnerabilities in the TCP stacks that are used by the Linux and FreeBSD kernels. These vulnerabilities are publicly known as...