468 matches found
com.github.mswolfe:spring-query-filter (>=4.2.0 <=4.3.2), io.github.cyjishuang:swagger-mode (=1.0) potentially affected by CVE-2020-5421 via org.springframework:spring-framework-bom (>=4.2.3.RELEASE <=4.3.14.RELEASE)
org.springframework:spring-framework-bom MAVEN version =4.2.3.RELEASE, =4.2.0, =4.3.2 - io.github.cyjishuang:swagger-mode =1.0 Source cves: CVE-2020-5421 Source advisory: OSV:GHSA-RV39-3QH7-9V7W...
Signal's Founder Hacked a Notorious Phone-Cracking Device
Plus: App Store scams, an anti-surveillance bill, and more of the week’s top security news...
CVE-2021-2222
Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite component: Template Search. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Design/Logic Flaw
Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite component: Template Search. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2222
CVE-2021-2222 affects Oracle E-Business Suite, specifically the Template Search component of the Presentment Architecture . Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data integrity and con...
CVE-2021-2222
Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite component: Template Search. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2222
Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite component: Template Search. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-37756)
Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, etc. It is a seamlessly integrated management suite. Presentment Architecture is one of the bill reminder tool,...
E.O. Would Strengthen Federal Cyber Requirements
The U.S. federal government is mulling changes to up its cybersecurity software game in the wake of the sprawling SolarWinds cyberattacks that came to light in December, including requiring data-breach notifications. In a draft executive order from President Joe Biden, software companies would be...
Lawmakers Take Aim at Insidious Digital ‘Dark Patterns’
A new California law prohibits efforts to trick consumers into handing over data or money. A bill in Washington state copies the language...
A week in security (October 12 – October 18)
Last week on Malwarebytes Labs, we looked at journalism’s role in cybersecurity on our Lock and Code podcast, gave tips for safer shopping on Amazon Prime day, and discussed an APT attack springing into life as Academia returned to the real and virtual campus environment. We also dug into potenti...
boatbillofsaleforms.com Cross Site Scripting vulnerability OBB-1402179
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
IPTV encoder devices contain multiple vulnerabilities
Overview Multiple vulnerabilities exist in various Video Over IP Internet Protocol encoder devices, also known as IPTV/H.264/H.265 video encoders. These vulnerabilities allow an unauthenticated remote attacker to execute arbitrary code and perform other unauthorized actions on a vulnerable system...
Bill & Melinda Gates foundation impersonated in Bitcoin phishing scam
By Sudais Asif The importance of this Bitcoin phishing scam has increased... This is a post from HackRead.com Read the original post: Bill & Melinda Gates foundation impersonated in Bitcoin phishing scam...
Prominent & verified Twitter accounts hacked to run crypto scam
By Waqas Official Twitter account of Bill Gates, Elon Musk and Justin Sun are among the list of hacked accounts used in the crypto scam. This is a post from HackRead.com Read the original post: Prominent & verified Twitter accounts hacked to run crypto scam...
trivy-action
Trivy Action GitHub Actionhttps://github.com/features/ac...
Social Engineering Based on Stimulus Bill and COVID-19 Financial Compensation Schemes Expected to Grow in Coming Weeks
Given the community interest and media coverage surrounding the economic stimulus bill currently being considered by the United States House of Representatives, we anticipate attackers will increasingly leverage lures tailored to the new stimulus bill and related recovery efforts such as stimulus...
Internet Voting in Puerto Rico
Puerto Rico is considered allowing for Internet voting. I have joined a group of security experts in a letter opposing the bill. Cybersecurity experts agree that under current technology, no practically proven method exists to securely, verifiably, or privately return voted materials over the...
tennisthunder.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1121752 Security Researcher bill Helped patch 52 vulnerabilities Received 2 Coordinated Disclosure badges Received 2 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting tennisthunder.ca website and its...
beddingproducts.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1121754 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...