15096 matches found
New Bill Targeting ‘Warrant-Proof’ Encryption Draws Ire
Privacy advocates are decrying a new bill, which would force tech companies to unlock encrypted devices if ordered to do so by law enforcement with a court issued warrant. The Lawful Access to Encrypted Data Act was introduced on Tuesday by Senate Judiciary Committee Chairman Lindsey Graham R-SC,...
[SECURITY] Fedora 32 Update: libexif-0.6.22-1.fc32
Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...
Fedora: Security Advisory for libexif (FEDORA-2020-b4db792558)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
digital-postcard.ch Cross Site Scripting vulnerability OBB-1202288
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
KoreaShow Number Error Vulnerability
KoreaShow is a system for cryptocurrency trading. An integer overflow vulnerability exists in the 'transferMulti' function in the smart contract implementation of KoreaShow. The vulnerability can be exploited by an attacker to increase digital assets with the help of the 'value' parameter...
CAYIN Technology xPost SQL Injection Vulnerability
CAYIN Technology xPost is a digital signage system for conference room management from CAYIN Technology in Taiwan, China. A SQL injection vulnerability exists in CAYIN Technology xPost 2.5 and prior versions. The vulnerability stems from a database-based application that lacks validation of...
Barracuda and Microsoft: Securing applications in public cloud
This blog post is part of the Microsoft Intelligence Security Association guest blog series. To learn more about MISA, go here. Barracuda Cloud Application Protection CAP platform features integrations with Microsoft Azure Active Directory Azure AD and Azure Security Center. A component of CAP,...
sanfranciscodigital.com.ar Cross Site Scripting vulnerability OBB-1200608
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
digitaljournal.com Cross Site Scripting vulnerability OBB-1199841
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Digital Signature Hijack - Binaries, PowerShell Scripts And Information About Digital Signature Hijacking
Hijacking legitimate digital signatures is a technique that can be used during red team assessments in order to sign PowerShell code and binaries. This could assist to bypass Device Guard restrictions and maintain stealthy in an engagement. DigitalSignatureHijack is a PowerShell script based on...
Do cybercriminals play cyber games during quarantine?
Thanks to the coronavirus pandemic, the role of the Internet in our lives has undergone changes, including irreversible ones. Some of these changes are definitely for the better, some are not very good, but almost all of them in some way affect digital security issues. We decided to take a closer...
'Lamphone' Hack Uses Lightbulb Vibrations to Eavesdrop on Homes
Researchers have discovered a novel way to spy on conversations that are happening in houses from almost a hundred feet away. The hack stems simply from a lightbulb hanging in the home. The hack, dubbed “lamphone,” is performed by analyzing the tiny vibrations of a hanging lightbulb, which are...
Protecting Unmanaged & IoT Devices: Why Traditional Security Tools Fail
We are currently experiencing the single largest explosion of network-enabled devices that we’ve ever witnessed. Many of these devices are running on the same networks as critical business solutions and may even be connecting directly to critical assets or delivering a critical capability...
Protecting Unmanaged & IoT Devices: Why Traditional Security Tools Fail
We are currently experiencing the single largest explosion of network-enabled devices that we’ve ever witnessed. Many of these devices are running on the same networks as critical business solutions and may even be connecting directly to critical assets or delivering a critical capability...
HCL Technologies Digital Experience Code Issue Vulnerability
HCL Technologies Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies India. A code issue vulnerability exists in HCL Technologies Digital Experience versions 8.5, 9.0, and 9.5, which arises from an improperly designed or implemented code...
Barracuda and Microsoft: Removing security barriers to faster public cloud adoption
Barracuda’s CloudGen Firewall is tightly integrated with Microsoft Azure Virtual WAN, Azure Active Directory Azure AD, Azure Security Center, and Azure Sentinel. Integrated into Azure, Barracuda’s networking and security capabilities enable customers’ secure infrastructure migrations and the use ...
CVE-2020-4101
"HCL Digital Experience is susceptible to Server Side Request Forgery."...
CVE-2020-4101
"HCL Digital Experience is susceptible to Server Side Request Forgery."...
