CVE-2020-12068

An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation...

Privilege escalation

An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation...

Palo Alto Networks PAN-OS Code Issue Vulnerability (CNVD-2020-31584)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A code issue vulnerability exists in Palo Alto Networks PAN-OS. The vulnerability stems from an improper design or implementation during code development for a network system or product. ...

XSS Vulnerability in eWebEditor Editor of Fuzhou Extreme Software Development Co.

eWebEditor is the browser-based, WYSIWYG online HTML editor. An XSS vulnerability exists in the eWebEditor editor of Fuzhou Extreme Software Development Co. that can be exploited by attackers to compromise confidentiality...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38191)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38192)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38190)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38184)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38182)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38189)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Over 4000 Android Apps Expose Users' Data via Misconfigured Firebase Databases

More than 4,000 Android apps that use Google's cloud-hosted Firebase databases are 'unknowingly' leaking sensitive information on their users, including their email addresses, usernames, passwords, phone numbers, full names, chat messages and location data. The investigation, led by Bob Diachenko...

Securing Smart Manufacturing

“Alexa, turn on the TV.” ”Get it yourself.” This nightmare scenario could play out millions of times unless people take steps to protect their IoT devices. The situation is even worse in industrial settings. Smart manufacturing, that is, Industry 4.0, relies on tight integration between IT system...

Maxum Development Rumpus Path Traversal Vulnerability

Maxum Development Rumpus is a suite of file transfer server software from Maxum Development in the United States. A security vulnerability exists in Maxum Development Rumpus versions prior to 8.2.12 macOS. An attacker can exploit the vulnerability to access arbitrary files on the server...

Red Hat Keycloak Code Issue Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A code issue vulnerability exists in Red Hat Keycloak versions prior to 9.0.2. The vulnerability stems from an improperly designed or implement...

How a Facebook Bug Took Down Spotify, TikTok, and Other Major iOS Apps

Thank a tiny change to a software development kit for widespread crashes Wednesday, including the Spotify and TikTok apps...

The Basics of Exploit Development 3: Egg Hunters

Hello dear reader. If you have read the other articles in this series, welcome back! If not I encourage you to read the previous installments before proceeding with this post. This post covers a surprisingly useful technique in exploit development called Egg Hunters. In order to demonstrate how E...

Principles of a Cloud Migration – Security W5H – The When

If you have to ask yourself when to implement security, you probably need a time machine! Security is as important to your migration as the actual workload you are moving to the cloud. Read that again. It is essential to be planning and integrating security at every single layer of both...

java security update

CentOS Errata and Security Advisory CESA-2020:1507 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

Building for Billions: Addressing Security Concerns for Platforms at Scale

Security operations once consisted of a multitude of manual operations based around alerts, thresholds and severity levels. As systems scale and platforms continue to grow, how do you keep up with the growing requirements to secure these transactions and the networks they are built upon?...