Google Chrome streams out-of-bounds memory access vulnerability

Google Chrome is a web browser developed by Google Inc. Google Chrome versions prior to 80.0.3987.87 contain an out-of-bounds memory access security vulnerability in the implementation of streams, which can be exploited by attackers to cause heap damage via a constructed HTML page...

Adobe Acrobat and Reader Buffer Errors (APSB20-05: CVE-2020-3754)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB20-05: CVE-2020-3752)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

The New Year Calls for a Change in the OT Industry’s State of Security

In 2014, a Western European steel mill suffered serious damage from a phishing attack that penetrated its IT and Operational Technology OT networks the software and hardware dedicated to monitoring and controlling physical devices where attackers gained control of plant equipment. In 2018, 74% of...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-00997)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in the Content Delivery Manager in Google Chrome versions prior to 78.0.3904.70, which can be exploited by remote attackers to cause heap damage with the help of specially crafted HTM...

CVE-2020-1871

USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200 have an improper credentials management vulnerability. The software does not properly manage certain credentials. Successful exploit could cause information...

Input validation

USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200 have an improper credentials management vulnerability. The software does not properly manage certain credentials. Successful exploit could cause information...

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

Information disclosure

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

Google Chrome WebAudio Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc. and WebAudio is an audio component. A resource management error vulnerability exists in WebAudio in versions of Google Chrome prior to 79.0.3945.79. The vulnerability stems from the mismanagement of system resources e.g., memory, disk space, files,...

Google Chrome PDFium Input Validation Error Vulnerability (CNVD-2020-00263)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome PDFium has an input validation error vulnerability. Attackers can exploit this vulnerability with the help of specially crafted PDF files to cause heap...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB19-55: CVE-2019-16460)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB19-55: CVE-2019-16462)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB19-55: CVE-2019-16455)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Google Chrome Resource Management Error Vulnerability (CNVD-2019-42756)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 75.0.3770.142. The vulnerability stems from the system's mismanagement of resources such as memory. A remote attacker can exploit the vulnerability to cause heap...

Google Chrome memory misreference vulnerability (CNVD-2019-42589)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 76.0.3809.100 previous version of a security vulnerability. Remote attackers can exploit the vulnerability through specially crafted PDF files to cause he...

DDoS-for-Hire Boss Gets 13 Months Jail Time

A 21-year-old Illinois man was sentenced last week to 13 months in prison for running multiple DDoS-for-hire services that launched millions of attacks over several years. This individual's sentencing comes more than five years after KrebsOnSecurity interviewed both the defendant and his father a...

ICS Attackers Set To Inflict More Damage With Evolving Tactics

Future attacks on industrial control system ICS networks may inflict even more damage in the long run, according to new research. Analysts expect them to evolve from attacks that have immediate, direct impact to those with multiple stages and attack vectors that are more stealthy. While it remain...