4019 matches found
Plugging the Data Leak in Manufacturing
More often than not, when then the internet of things IoT is brought up these days, it conjures images of Alexa, Siri and Cortana. These personal assistants can help users turn on a smart light bulb, flick on the oven and get you the day’s news, all in one fell swoop. However, IoT has evolved far...
U.S. Dept Of Defense: [HTA2] Authorization Bypass on https://██████ leaks confidential aircraft/missile information
Vulnerability description not provided...
CVE-2019-14366
CVE-2019-14366 affects the WordPress WP SlackSync plugin (versions up to 1.8.5). The root cause is leaking a Slack Access Token in the plugin’s source code, enabling an attacker to obtain Slack-relevant information (channels, members, etc.). Publicly available connected sources corroborate the da...
ThreatList: Data Breaches Batter Stock Prices at Public Companies, For Months
Much has been made of the fallout that companies face after a data breach. But for public companies, shaken investor confidence adds a whole new dimension to recovery concerns. A recent study from Comparitech shows that share prices for large breached companies will hit a low point approximately ...
Huge Data Leak Doxes Members of Notorious Neo-Nazi Forum
Apple Mail encryption, Ring doorbell Wi-Fi, and more of the week's top security news...
PHPEMS Online Practice Exam System suffers from XSS vulnerability
PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, support for a variety of types of questions and presentation, is the first to support the question of the question and hand automatic one of the scoring of the PHP online mock exam system. PHPEMS online mo...
Mozilla: Stack buffer overflow in WebRTC networking
A flaw was discovered in Mozilla Firefox and Thunderbird where a fixed-stack buffer overflow could occur during WebRTC signalling. The vulnerability could lead to an exploitable crash or leak data...
chromium-browser: Cross-context information leak
Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
Facebook Reveals New Data Leak Incident Affecting Groups' Members
Facebook today revealed yet another security incident admitting that roughly 100 app developers may have improperly accessed its users' data in certain Facebook groups, including their names and profile pictures. In a blog post published Tuesday, Facebook said the app developers that unauthorized...
Facebook Reveals New Data Leak Incident Affecting Groups' Members
Facebook today revealed yet another security incident admitting that roughly 100 app developers may have improperly accessed its users' data in certain Facebook groups, including their names and profile pictures. In a blog post published Tuesday, Facebook said the app developers that unauthorized...
Security update for chromium, re2 (important)
openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2425-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...
openSUSE: Security Advisory for chromium, re2 (openSUSE-SU-2019:2420-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
KLA11714 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Cross-origin data leak vulnerability can be exploited to arbitrary code executio...
Mozilla: Stack buffer overflow in WebRTC networking
A flaw was discovered in Mozilla Firefox and Thunderbird where a fixed-stack buffer overflow could occur during WebRTC signalling. The vulnerability could lead to an exploitable crash or leak data...
SQL injection vulnerability in ad***_jq***.php file de*** method in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file de method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
Mozilla: Stack buffer overflow in WebRTC networking
A flaw was discovered in Mozilla Firefox and Thunderbird where a fixed-stack buffer overflow could occur during WebRTC signalling. The vulnerability could lead to an exploitable crash or leak data...
KLA11588 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in media can be exploited to arbitrary code execution; 2. Buffer overrun vulnerability in...
U.S. Government, Military Personnel Data Leaked By Autoclerk
A leaky database owned by reservations management system Autoclerk has exposed the personal data and travel information for thousands of users – including U.S. government and military personnel. Autoclerk, which was acquired by the Best Western Hotel and Resorts Group in August, provides...
