WordPress Real-Time Find and Replace Plugin Cross-Site Scripting (CVE-2020-13641)

A cross-site scripting vulnerability exists in WordPress Real-Time Find and Replace Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c as demonstrated by nm.

...

PT-2020-15698

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.4.4 Description The issue is an out-of-bounds read in the njs lvlhsh level find function in njs lvlhsh.c. This affects njs, which is used in NGINX. Recommendations For versions prior to 0.4.4, update to version 0.4.4 or...

Flaws in Samsung Phones Exposed Android Users to Remote Attacks

New research disclosed a string of severe security vulnerabilities in the 'Find My Mobile'—an Android app that comes pre-installed on most Samsung smartphones—that could have allowed remote attackers to track victims' real-time location, monitor phone calls, and messages, and even delete data...

Flaws in Samsung Phones Exposed Android Users to Remote Attacks

New research disclosed a string of severe security vulnerabilities in the 'Find My Mobile '—an Android app that comes pre-installed on most Samsung smartphones—that could have allowed remote attackers to track victims' real-time location, monitor phone calls, and messages, and even delete data...

find-job.net Cross Site Scripting vulnerability OBB-1257292

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Samsung Quietly Fixes Critical Galaxy Flaws Allowing Spying, Data Wiping

Researchers have disclosed a slew of critical-severity, patched flaws in flagship Samsung smartphones – including the Galaxy S7, S8 and S9 models. The vulnerabilities specifically stem from Samsung’s “Find My Mobile” service, a feature built into the smartphones allowing users to locate their...

NSA Warns Smartphones Leak Location Data

Mobile devices expose location data in more ways than most people know, and turning off services such as Find My Phone, Wi-Fi and Bluetooth can help mitigate tracking, but are no silver bullet that prevents a third party from tracking users. That’s advice shared by U.S. top spy division, the...

ch.find-job-in.com Cross Site Scripting vulnerability OBB-1251260

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Design/Logic Flaw

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem...

CVE-2019-20032

CVE-2019-20032 affects Aspire-derived NEC PBXes (SV8100, SV9100, SL1100, SL2100). A local attacker who has access to an InMail voicemail box with the find me/follow me feature can reach the system’s administration modem. The case describes no details on the root cause beyond the feature interplay...

CVE-2019-20032

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem...

About the security content of iOS 11.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

PT-2020-21659

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: iotlb to region mips, get page addr code mips, and tb fi...

PT-2020-21776

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write crash. The crash state includes functions such as find dom, opt loop, and bpf optimize. No information...

VMware ESXi Use-After-Free / Out-Of-Bounds Access Vulnerability

Several security issues have been identified in the VMware ESIx virtual machine monitor VMM. A use-after-free UAF vulnerability in PVNVRAM, a missing return value check in EHCI USB controller leading to private heap information disclosure, and several out-of-bounds reads. Overview ======= We...

find-job.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1225435 Security Researcher raz0rbl4de Helped patch 40 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting find-job.net website and its users. Following...

PT-2020-22542

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue was identified, characterized as an UNKNOWN READ. The crash state involves the functions H5T bit find, H5T conv i i, and H5T convert. Recommendations At the moment, there is no...

PT-2020-22574

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue was identified, characterized as an UNKNOWN READ. The crash state involves several functions, including H5G node cmp3, H5B find, and H5G stab lookup. Recommendations At the moment,...

PT-2020-22441

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions: ne find element, ne parse, an...