Adobe DNG Software Development Kit Buffer Overflow Vulnerability

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

PT-2020-13108

Name of the Vulnerable Software and Affected Versions Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can lead to significant impacts such as stealing data, modifying disk...

CVE-2020-12427: Cross-Site Request Forgery (CSRF)

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38184)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38191)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38190)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Cisco Digital Network Architecture Center 1.3.1.4 Cross Site Scripting

Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Date: 2020-04-16 Exploit Author: Dylan Garnaud & Benoit Malaboeuf - Pentesters from Orange Cyberdefense France Vendor Homepage:...

Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Vulnerability

Exploit for java platform in category web applications Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Exploit Author: Dylan Garnaud & Benoit Malaboeuf - Pentesters from Orange Cyberdefense France Vendor Homepage:...

Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting

Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Date: 2020-04-16 Exploit Author: Dylan Garnaud & Benoit Malaboeuf - Pentesters from Orange Cyberdefense France Vendor Homepage:...

Pandora Digital Error Vulnerability

Pandora PDX is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in the smart contract implementation of PDX. An attacker could exploit the vulnerability to set a user's balance to an arbitrary value...

CryptoBotsBattle Digital Error Vulnerability

CryptoBotsBattle CBTB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'batchTransfer' function of CBTB's smart contract implementation. An attacker could exploit the vulnerability to create an arbitrary number of tokens for any user...

Tracto Digital Error Vulnerability

Tracto TRCT is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'increaseApproval' function in TRCT's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

WeMediaChain Digital Error Vulnerability

WeMediaChain WMC is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'batchTransfer' function in WMC. An attacker can use this vulnerability to set the balance of any user...

GlobeCoin Digital Error Vulnerability

GlobeCoin GLB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfertokensafterICO' function in GLB. An attacker can use this vulnerability to set the balance of any user...

Protect your accounts with smarter ways to sign in on World Passwordless Day

As the world continues to grapple with COVID-19, our lives have become increasingly dependent on digital interactions. Operating at home, we’ve had to rely on e-commerce, telehealth, and e-government to manage the everyday business of life. Our daily online usage has increased by over 20 percent...

Design/Logic Flaw

A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper...

CVE-2020-3308

Cisco Firepower Threat Defense (FTD) Software is vulnerable in its Image Signature Verification feature. The root cause is improper verification of digital signatures for patch images, enabling an authenticated, remote attacker with administrator-level credentials to craft and load an unsigned pa...

Cisco Firepower Threat Defense Software Signature Verification Bypass Vulnerability

A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper...

Imperva Poised to Deliver its Leading Advanced Bot Protection and Network Security in India

With a presence in India since 2017, Imperva is continuing to provide a level of security excellence in the region. With Asia in general as both the target and source of most network DDoS attacks, and India topping the list for the first time in our latest DDoS threat landscape report, this is mo...

Logic Flaw Vulnerability in FuturXE

FuturXE FXE is an ethereum-based virtual currency.A security vulnerability exists in the 'transferFrom' function in FXE's smart contract implementation, which stems from a logic error in the program. An attacker could exploit the vulnerability to make an unauthorized transfer of digital assets...