SUSE-SU-2020:2307-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

SUSE-SU-2020:2306-1 Security update for grub2

This update for grub2 fixes the following issue: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

SUSE-SU-2020:2303-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

Microsoft and Corrata integrate to extend cloud app security to mobile endpoints

This blog post is part of the Microsoft Intelligence Security Association guest blog series. To learn more about MISA, go here. The growth of mobile and remote work and the emergence of the “post perimeter” world has made keeping track of shadow IT a huge challenge for enterprise IT teams. What...

APIs Are the Next Frontier in Cybercrime

Application Programming Interface API usage has exploded, and cybercriminals are increasingly taking advantage of API security flaws to commit fraud and steal data. APIs, which are used to create connections between software programs and perform integrations, make everything a bit easier — from...

Cisco Video Surveillance 8000 Series IP Cameras Memory Disclosure Vulnerability

Cisco Video Surveillance 8000 Series IP Cameras is a network camera device. A memory leak vulnerability exists in the processing of CDP messages by Cisco Video Surveillance 8000 Series IP Cameras, which can be exploited by an attacker to cause a denial of service...

smictom-menezbre.com Improper Access Control vulnerability OBB-1269711

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

my-company5345.mysite.bz Cross Site Scripting vulnerability OBB-1268490

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

provincia.caltanissetta.it Cross Site Scripting vulnerability OBB-1266168

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability

A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. The vulnerability is due to incorrect processin...

PT-2020-3771

Name of the Vulnerable Software and Affected Versions: Cisco Video Surveillance 8000 Series IP Cameras affected versions not specified Description: The issue exists due to insufficient input validation in the Cisco Discovery Protocol implementation. This could allow a remote attacker to execute...

PT-2020-5083

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance 8000 Series IP Cameras affected versions not specified Description A vulnerability in the Cisco Discovery Protocol could allow an unauthenticated, adjacent attacker to cause a memory leak, leading to a denial of servic...

PT-2020-3770

Name of the Vulnerable Software and Affected Versions: Cisco Video Surveillance 8000 Series IP Cameras affected versions not specified Description: The issue exists due to insufficient input validation in the Cisco Discovery Protocol implementation. This could allow a remote attacker to execute...

‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product

ARCHIVED STORY ‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product By Douglas McKee · August 18, 2020 Eoin Carroll, Charles McFarland, Kevin McGrath, and Mark Bereza contributed to this report. The Internet of Things promises to make our lives easier. Want to remotely turn...

UniFi Protect Detection (UBNT)

UBNT Ubiquiti Networks discovery protocol based detection of Unifi Protect. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2020-1579

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

CVE-2020-1579

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

CVE-2020-1579

CVE-2020-1579 affects the Windows Function Discovery SSDP Provider. Root cause: improper memory handling leading to privilege elevation. Exploitation requires local code execution to run a crafted app and elevate rights. The security update fixes memory handling in the provider; no further exploi...

CVE-2020-1579 Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability

...