RHEL 8 : opensc (RHSA-2021:1600)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1600 advisory. The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic...

Adobe Digital Editions Privilege Escalation

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and perform arbitrary writes to the file system...

opensc security, bug fix, and enhancement update

An update is available for opensc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSC set of libraries and utilities provides support for working with...

Moderate: opensc security, bug fix, and enhancement update

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fixes: opensc: heap-based buffer overflow in...

Magecart Goes Server-Side in Latest Tactics Changeup

Magecart Group 12, known for skimming payment information from online shoppers, was fingered for last September’s gonzo attack on more than 2,000 e-Commerce sites, and now researchers have issued a report explaining how they did it, detailing a new technical approach. The skimmers are still “very...

Try This One Weird Trick Russian Hackers Hate

In a Twitter discussion last week on ransomware attacks, KrebsOnSecurity noted that virtually all ransomware strains have a built-in failsafe designed to cover the backsides of the malware purveyors: They simply will not install on a Microsoft Windows computer that already has one of many types o...

CVE-2021-29044

Cross-site scripting XSS vulnerability in the Site module's membership request administration pages in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary w...

PT-2021-18043

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.2 through 7.3.5 Liferay DXP 7.3 before fix pack 1 Description: A cross-site scripting XSS issue exists in the Redirect module's redirection administration page, allowing remote attackers to inject arbitrary web...

PT-2021-4646

Name of the Vulnerable Software and Affected Versions LibreOffice versions 7.0.0 through 7.0.5 LibreOffice versions 7.1.0 through 7.1.1 Description The issue is related to improper certificate validation in LibreOffice, allowing an attacker to manipulate the documentsignatures.xml or...

Liferay Portal 跨站脚本漏洞

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platforms, social networks and more. A cross-site scripting vulnerability exists in Lifer...

PT-2021-18040

Name of the Vulnerable Software and Affected Versions: Liferay DXP version 7.3 before fix pack 1 Description: A denial-of-service issue exists in the Multi-Factor Authentication module, allowing remote authenticated attackers to prevent user authentication. This can be achieved by either enabling...

Gamers level up with rewards for better security

There was a time when stolen gaming accounts were almost treated as a fact of life. Console hacks weren’t taken particularly seriously. Security research in this area was occasionally derided as unimportant or trivial. Gaming accounts had an essence of innate disposability to them, even if this...

Star (Hangzhou) Network Technology Co., Ltd. cloud digital signage in unauthorized access vulnerability

Cloud digital signage can be fast program production, one-click publishing, wonderful template material easy to apply and so on. Star Hangzhou Network Technology Co., Ltd. cloud digital signage in the unauthorized access vulnerability, attackers can use the vulnerability to obtain sensitive...

How ViacomCBS Digital delivers uninterrupted content streaming to millions of fans without compromising security: Lessons for enterprise CISOs

Each day, ViacomCBS Digital sees a growing surge in digital content demand—from MTV and Comedy Central to CBS Sports, rushing across its Paramount+ formerly CBS All Access streaming platform. Delivering digital content to millions of users on a daily basis doesn’t happen on its own—it makes it to...

Visualize and Analyze Bots with Real User Monitoring

You interact with more than just customers on your website. Bots make up a disproportionate amount of traffic, which can skew human behavior analysis data -- and cause you to make the wrong business decisions. In fact, one Akamai customer with 30% of total traffic from bots noticed a huge gap in...

Weak Password Vulnerability in HiBOS Hotel Broadband Operation System of Ammed Century (Beijing) Technology Co.

Ammed Century Beijing Technology Co., Ltd. is a digital service solution provider and digital content operation service provider for star-rated hotels. A weak password vulnerability exists in the HiBOS Hotel Broadband Operation System of Ammed Century Beijing Technology Company Limited, which can...

What is Vulnerability Assessment and How to Prevent Them❓

A vulnerability assessment is an essential starting step to surveying your association’s receptiveness to security challenges, including physical and computerized security. It can likewise be portrayed as a lot of specific tests planned to recognize deficiencies in your network and its key...

Command Execution Vulnerability in Amami Digital Hotel's Broadband Operations System

Anmax Century Beijing Technology Co., Ltd. is a hotel O2O intelligent eco-operator. A command execution vulnerability exists in the Anmax Digital Hotel Broadband Operation System. An attacker can exploit the vulnerability to gain server privileges...

Arbitrary File Read Vulnerability in BlueLine's New Generation Digital OA (Large and Medium Enterprises) EKP

Shenzhen BlueLine Software Co., Ltd. is a well-known large-platform OA service provider and a leading knowledge management solution provider in China, which is a national high-tech enterprise specializing in knowledge-based consulting, software R&D, implementation and technical services for...

Arbitrary File Read Vulnerability in Education Cloud Portal of Tianwen Digital Media Technology (Beijing) Co.

Tianwen Digital Media Technology Beijing Co., Ltd. is a subsidiary of Zhongnan Media, a state-controlled national high-tech enterprise and Zhongguancun high-tech enterprise. There is an arbitrary file read vulnerability in Tianwen Digital Media Technology Beijing Co., Ltd.'s Education Cloud Porta...