CVE-2002-0639

creationtimestamp| type| source ---|---|--- 2019-07-21 18:35:29+00:00| seen| https://t.me/VulnerabilityNews/8168 2024-02-08 21:16:24+00:00| seen| https://t.me/ctinow/181632 2025-08-05 23:05:44+00:00| seen| https://bsky.app/profile/vegashackware.com/post/3lvot3rhwys2w...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm speaking at Black Hat USA 2019 in Las Vegas on Wednesday, August 7 and Thursday, August 8, 2019. I'm speaking on "Information Security in the Public Interest" at DefCon 27 in Las Vegas on Saturday, August 10, 2019. The list is...

End of support for Office 2010

End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...

Security Bulletin: OpenSSL vulnerabilities announced August 6th 2014 affect Juniper EX Series Network Switches sold by IBM for use in IBM Products (9 CVEs)

Summary The 9 OpenSSL vulnerabilities announced August 6th 2014 are fixed as detailed below. Vulnerability Details Abstract The 9 OpenSSL vulnerabilities announced August 6th 2014 are fixed as detailed below. Content Vulnerability Details: CVE-ID: CVE-2014-3505 Description: OpenSSL is vulnerable ...

August Connect Information Disclosure Vulnerability

August Connect is a bridge device for supporting Wi-Fi and smart lock connections. A security vulnerability exists in August Connect that stems from the program failing to securely transfer data between the August app and August Connect during configuration. An attacker could exploit the...

CVE-2018-20100

An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST,...

Design/Logic Flaw

An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST,...

CVE-2018-20100

The CVE-2018-20100 entry concerns August Connect devices where the configuration flow between the August app and August Connect exposes home Wi‑Fi credentials. Root cause: data is transferred over an unencrypted AP and the credentials are sent via HTTP POST using the AugustWifiDevice class, with ...

CVE-2018-20100

An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST,...

Node.js Multiple Vulnerabilities (August 2018 Security Releases)

The version of Node.js installed on the remote host is 6.x prior to 6.14.4, 8.x prior to 8.11.4 or 10.x prior to 10.9.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...

CVE-2016-6328

creationtimestamp| type| source ---|---|--- 2018-11-01 01:58:10+00:00| seen| https://t.me/cibsecurity/979 2025-08-03 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb64eky25...

August 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 (KB 4346083)

August 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 KB 4346083 Summary This article lists the Quality Rollups for .NET Framework 2.0 Service Pack 2 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2.Important All updates...

MS11-025: Description of the security update for Visual C++ 2010 Service Pack 1: August 9, 2011

None None...

Hackers Steal Customers' Credit Cards From Newegg Electronics Retailer

The notorious hacking group behind the Ticketmaster and British Airways data breaches has now victimized popular computer hardware and consumer electronics retailer Newegg. Magecart hacking group managed to infiltrate the Newegg website and steal the credit card details of all customers who enter...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

Threat Roundup for August 31 to September 7

Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we’ve observed this week — covering the dates between Aug. 31 and Sept. 7. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, we will summarize the threats we’ve observed b...

British Airways Hacked – 380,000 Payment Cards Compromised

British Airways, who describes itself as "The World's Favorite Airline," has confirmed a data breach that exposed personal details and credit-card numbers of up to 380,000 customers and lasted for more than two weeks. So who exactly are victims? In a statement released by British Airways on...

CVE-2018-16133

creationtimestamp| type| source ---|---|--- 2018-08-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45303...

haacon.com XSS vulnerability

Open Bug Bounty ID: OBB-670719 Description| Value ---|--- Affected Website:| haacon.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

doslergrup.com XSS vulnerability

Open Bug Bounty ID: OBB-670504 Description| Value ---|--- Affected Website:| doslergrup.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...