Experts Sound Alarm On New Android Malware Sold On Hacking Forums

Cybersecurity researchers have exposed the operations of an Android malware vendor who teamed up with a second threat actor to market and sell a remote access Trojan RAT capable of device takeover and exfiltration of photos, locations, contacts, and messages from popular apps such as Facebook,...

Zhiyuan OA-A8-V5 Collaboration Management Software has a Logic Flaw Vulnerability

The business scope of Beijing Zhiyuan Internet Software Co., Ltd. includes: technology development, technology transfer, technology consulting and technology service. A logic flaw vulnerability exists in Zhiyuan OA-A8-V5 collaborative management software, which can be exploited by attackers to...

A6-s collaborative management software has information leakage vulnerability

A6-s Collaboration Management Software is a set of collaborative office software that can help small and micro-organizations such as enterprises and institutions to quickly deliver products. A6-s Collaboration Management Software has an information disclosure vulnerability that can be exploited b...

2020 Work-for-Home Shift: What We Learned

Goodbye, 2020 — and good riddance, right? Most of us don’t want to take too much from this year into the next — but let’s make an exception for what we learned about security in the wake of the COVID-19 pandemic. In 2021 after all, more enterprises will permanently downsize their physical spaces...

Set New InsightVM Goals and Share with Your Team for Increased Visibility and More Efficient Execution

Since 2018, thousands of enterprises have utilized InsightVM’s Goals and SLAs feature to build their organization-specific security goals. Through Goals and SLAs, security teams ensure that they’re making progress toward their goals and service-level agreements SLAs at an appropriate pace, and th...

Mitel MiCollab Information Disclosure Vulnerability

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in Mitel MiCollab versions prior to 9.2 for NuPoint Messenger. The vulnerability stems from insufficient access control. An attacker could exploit the vulnerability t...

Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password (cisco-sa-20181003-cpcp-password)

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is prior to 12.1. It is, therefore, affected by a vulnerability in the install function that could allow an unauthenticated, remote attacker to access the administrative web interface using a...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75009)

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75008)

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75010)

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

Collaborative innovation on display in Microsoft’s insider risk management strategy

The disrupted work environment, in which enterprises were forced to find new ways to enable their workforce to work remotely, changed the landscape for operations as well as security. One of the top areas of concern is managing insider risks, a complex undertaking even before the pandemic, and ev...

Collaborative innovation on display in Microsoft’s insider risk management strategy

The disrupted work environment, in which enterprises were forced to find new ways to enable their workforce to work remotely, changed the landscape for operations as well as security. One of the top areas of concern is managing insider risks, a complex undertaking even before the pandemic, and ev...

CVE-2020-35123

In Zimbra Collaboration Suite Network Edition versions 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17...

CVE-2020-35123

In Zimbra Collaboration Suite Network Edition versions 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17...

Design/Logic Flaw

In Zimbra Collaboration Suite Network Edition versions 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17...

CVE-2020-35123

The CVE-2020-35123 issue affects Zimbra Collaboration Suite Network Edition, specifically versions

WESEEK GROWI Directory Traversal Vulnerability

GROWI is a team collaboration software. A directory traversal vulnerability exists in WESEEK GROWI, which can be exploited by remote attackers to alter data by uploading specially crafted files...

Zimbra Collaboration Suite Code Issue Vulnerability

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A code issue vulnerability exists in Zimbra Collaboration Suite that stems from the vulnerability of the Consumer Store extension to XXE attacks...

Cisco Collaboration Server Cross-Site Scripting (CVE-2010-0641)

A cross site scripting vulnerability exists in Cisco Collaboration Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...