Critical Bugs in Dell Wyse Thin Clients Allow Code Execution, Client Takeovers

Dell has patched two critical security vulnerabilities in its Dell Wyse Thin Client Devices, which are small form-factor computers optimized for connecting to a remote desktop. The bugs allow arbitrary code execution and the ability to access files and credentials, researchers said. Thin clients...

Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices

A team of researchers today unveiled two critical security vulnerabilities in Dell Wyse Thin clients that could have potentially allowed attackers to remotely execute malicious code and access arbitrary files on affected devices. The flaws, which were uncovered by healthcare cybersecurity provide...

Rocket.Chat: Unauthenticated clients can modify Livechat Business Hours

The Meteor method "livechat:saveOfficeHours" allowed unauthenticated clients to modify the global Livechat Business Hours by directly updating the database model...

CVE-2020-27154

The chat window of Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user...

oxenstored: node ownership can be changed by unprivileged clients

ISSUE DESCRIPTION Nodes in xenstore have an ownership. In oxenstored, a owner could give a node away. But node ownership has quota implications. Any guest can run another guest out of quota, or create an unbounded number of nodes owned by dom0, thus running xenstored out of memory IMPACT A...

CVE-2020-24383

creationtimestamp| type| source ---|---|--- 2020-12-12 02:36:11+00:00| seen| https://t.me/cibsecurity/20662 2020-12-12 02:39:09+00:00| seen| https://t.me/cibsecurity/20682 2020-12-12 03:25:36+00:00| seen| https://t.me/cibsecurity/20702 2020-12-12 04:07:22+00:00| seen| https://t.me/cibsecurity/207...

CVE-2020-13987

creationtimestamp| type| source ---|---|--- 2020-12-12 00:36:07+00:00| seen| https://t.me/cibsecurity/20566 2020-12-12 00:46:03+00:00| seen| https://t.me/cibsecurity/20586 2020-12-12 01:05:16+00:00| seen| https://t.me/cibsecurity/20605 2020-12-12 01:25:24+00:00| seen| https://t.me/cibsecurity/206...

CVE-2020-7791

creationtimestamp| type| source ---|---|--- 2020-12-11 20:35:51+00:00| seen| https://t.me/cibsecurity/20362 2020-12-11 20:46:07+00:00| seen| https://t.me/cibsecurity/20382 2020-12-11 21:25:21+00:00| seen| https://t.me/cibsecurity/20401 2020-12-11 22:04:40+00:00| seen| https://t.me/cibsecurity/204...

CVE-2020-27132

creationtimestamp| type| source ---|---|--- 2020-12-11 20:35:44+00:00| seen| https://t.me/cibsecurity/20357 2020-12-11 20:46:00+00:00| seen| https://t.me/cibsecurity/20377 2020-12-11 21:25:15+00:00| seen| https://t.me/cibsecurity/20396 2020-12-11 22:04:32+00:00| seen| https://t.me/cibsecurity/204...

CVE-2020-29589

creationtimestamp| type| source ---|---|--- 2020-12-11 18:37:43+00:00| seen| https://t.me/cibsecurity/20264 2020-12-11 19:25:30+00:00| seen| https://t.me/cibsecurity/20284 2020-12-11 19:34:38+00:00| seen| https://t.me/cibsecurity/20303 2020-12-11 20:24:31+00:00| seen| https://t.me/cibsecurity/203...

CVE-2020-29591

creationtimestamp| type| source ---|---|--- 2020-12-11 18:37:42+00:00| seen| https://t.me/cibsecurity/20263 2020-12-11 19:25:29+00:00| seen| https://t.me/cibsecurity/20283 2020-12-11 19:34:37+00:00| seen| https://t.me/cibsecurity/20302 2020-12-11 20:24:30+00:00| seen| https://t.me/cibsecurity/203...

CVE-2020-7793

creationtimestamp| type| source ---|---|--- 2020-12-11 16:35:42+00:00| seen| https://t.me/cibsecurity/20106 2020-12-11 17:25:39+00:00| seen| https://t.me/cibsecurity/20126 2020-12-11 18:05:11+00:00| seen| https://t.me/cibsecurity/20144 2020-12-11 18:11:20+00:00| seen| https://t.me/cibsecurity/201...

CVE-2020-7542

creationtimestamp| type| source ---|---|--- 2020-12-11 07:35:09+00:00| seen| https://t.me/cibsecurity/19773 2020-12-11 07:38:11+00:00| seen| https://t.me/cibsecurity/19793 2020-12-11 08:25:26+00:00| seen| https://t.me/cibsecurity/19813 2020-12-11 09:25:21+00:00| seen| https://t.me/cibsecurity/198...

CVE-2020-16608

creationtimestamp| type| source ---|---|--- 2020-12-11 02:34:32+00:00| seen| https://t.me/cibsecurity/19638 2020-12-11 02:37:36+00:00| seen| https://t.me/cibsecurity/19658 2020-12-11 03:25:25+00:00| seen| https://t.me/cibsecurity/19678 2020-12-11 04:25:20+00:00| seen| https://t.me/cibsecurity/196...

CVE-2020-12516

creationtimestamp| type| source ---|---|--- 2020-12-10 07:33:31+00:00| seen| https://t.me/cibsecurity/18561 2020-12-10 07:36:34+00:00| seen| https://t.me/cibsecurity/18581 2020-12-10 08:25:30+00:00| seen| https://t.me/cibsecurity/18601 2020-12-10 09:25:21+00:00| seen| https://t.me/cibsecurity/186...

CVE-2020-27833

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image .tar file which contains symbolic links. The vulnerability is limited to the command oc image extract. If a symbolic link is first...

CVE-2020-17156

creationtimestamp| type| source ---|---|--- 2020-12-10 02:33:11+00:00| seen| https://t.me/cibsecurity/18404 2020-12-10 02:36:11+00:00| seen| https://t.me/cibsecurity/18424 2020-12-10 02:39:01+00:00| seen| https://t.me/cibsecurity/18436 2020-12-10 03:25:22+00:00| seen| https://t.me/cibsecurity/184...

CVE-2020-17115

creationtimestamp| type| source ---|---|--- 2020-12-10 02:33:09+00:00| seen| https://t.me/cibsecurity/18403 2020-12-10 02:36:10+00:00| seen| https://t.me/cibsecurity/18423 2020-12-10 02:39:00+00:00| seen| https://t.me/cibsecurity/18435 2020-12-10 03:25:21+00:00| seen| https://t.me/cibsecurity/184...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2226-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

Cybersecurity Firm FireEye Got Hacked; Red-Team Pentest Tools Stolen

FireEye, one of the largest cybersecurity firms in the world, said on Tuesday it became a victim of a state-sponsored attack by a "highly sophisticated threat actor" that stole its arsenal of Red Team penetration testing tools it uses to test the defenses of its customers. The company said it's...