Unspecified Vulnerability in Google Chrome (CNVD-2021-16858)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A security vulnerability exists in Google Chrome versions prior to 89.0.4389.72. A remote attacker can cause heap of damage through a carefully crafted HTML page...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in bookmarks in versions prior to Google Chrome 89.0.4389.72. A remote attacker can exploit this vulnerability to cause he...

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A security vulnerability exists in Google Chrome versions prior to 89.0.4389.72. A remote attacker can cause heap of damage through a carefully crafted HTML page...

Everything You Need to Know About Evolving Threat of Ransomware

The cybersecurity world is constantly evolving to new forms of threats and vulnerabilities. But ransomware proves to be a different animal—most destructive, persistent, notoriously challenging to prevent, and is showing no signs of slowing down. Falling victim to a ransomware attack can cause...

Oracle Hospitality Opera Remote Code Execution (CVE-2016-5563)

A vulnerability exists in Oracle Hospitality Opera. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Yandex Employee Caught Selling Access to Users' Email Inboxes

Russian Dutch-domiciled search engine, ride-hailing and email service provider Yandex on Friday disclosed a data breach that compromised 4,887 email accounts of its users. The company blamed the incident on an unnamed employee who had been providing unauthorized access to the users' mailboxes for...

Yandex Data Breach Exposes 4K+ Email Accounts

Yandex – one of Europe’s largest internet companies – is warning of a data breach that compromised 4,887 email accounts. The breach stems from an insider threat. Yandex is the most-used search engine in Russia – and the fifth most-popular search engine worldwide. Beyond its search engine, Yandex’...

Singtel Suffers Zero-Day Cyberattack, Damage Unknown

Singtel, Tier 1 telecom carrier throughout Asia and owner of Australian telco Optus, has been impacted by a software security hole in a third-party file transfer appliance targeted by attackers. Singtel is one of multiple organizations affected by the bug, including an Australian medical research...

Vulnerability fixed in vSphere Replication

VMWare has fixed a vulnerability in vSphere Replicator. A malicious person with management privileges in Replicator can exploit the vulnerability exploit it to execute arbitrary code with system privileges on the underlying system. Because such an attack fits into the so-called "evil admin"...

Adobe Acrobat and Reader Improper Input Validation (APSB21-09: CVE-2021-21060)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader NULL Pointer Dereference (APSB21-09: CVE-2021-21057)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Remote Code Execution (APSB21-09: CVE-2021-21037)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Zenly: Google Maps API key stored as plain text leading to DOS and financial damage

The researcher highlighted the fact that the Google Maps API key which is by design easily retrievable from the .apk was missing some restrictions. It then could be used by anyone to query the Google Static Map API, and possibly lead to financial damage. Resolved by enforcing missing restrictions...

Google Chrome post-release reuse vulnerability (CNVD-2021-14739)

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Fonts in versions prior to Google Chrome 88.0.4324.146. An attacker can exploit this vulnerability to leverage heap damage via a crafted HTML page...

Google Chromium 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Fonts in versions prior to Google Chrome 88.0.4324.146. An attacker can exploit this vulnerability to leverage heap damage via a crafted HTML page...

Importance of Application Security and Customer Data Protection to a Startup

When you are a startup, there are umpteen things that demand your attention. You must give your hundred percent probably even more! to work effectively and efficiently with the limited resources. Understandably, the application security importance may be pushed at the bottom of your things-to-do...

Google Chrome post-release reuse vulnerability (CNVD-2021-30147)

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in Blink in versions prior to Google Chrome 88.0.4324.96. An attacker can cause heap damage via a crafted HTML page...

Google Chrome post-release reuse vulnerability (CNVD-2021-17312)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Media in versions prior to Google Chrome 88.0.4324.96. A remote attacker can cause heap damage via a carefully crafted...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in WebSQL in versions prior to Google Chrome 88.0.4324.96. An attacker can exploit this vulnerability to cause heap damage via a crafted HTML page...

Google Chrome post-release reuse vulnerability (CNVD-2021-30149)

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in WebSQL in versions prior to Google Chrome 88.0.4324.96. An attacker can exploit this vulnerability to cause heap damage via a crafted HTML page...