The vulnerability of the Profile component in the Oracle iSupport web application allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over that data.

The vulnerability of the Profile component in the Oracle iSupport web application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or delete data usin...

The vulnerability of the browser.tabs.executeScript() function in the WebExtensions extension of the Mozilla Firefox browser allows a hacker to perform cross-site scripting attacks.

The vulnerability of the browser.tabs.executeScript function in WebExtensions extensions of the Mozilla Firefox browser is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability in the web interface for managing microprogrammed software in Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W routers allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system, which allows a perpetrator to gain unauthorized access to protected information or to read, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or delet...

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure using the MySQL protocol...

Hebei Yun in Information Technology Service Co., Ltd. unified identity authentication system there are logical flaws vulnerability

Hebei Yun in Information Technology Service Co., Ltd. was founded in 2014, and is committed to the development of intelligent digital campus products and so on. A logic flaw vulnerability exists in the unified identity authentication system of Hebei Yunzai Information Technology Service Co. Ltd...

ADT Security Camera Flaws Open Homes to Eavesdropping

UPDATE Researchers have publicly disclosed security flaws found in ADT-owned LifeShield security cameras, which, if exploited, could have allowed a local attacker to eavesdrop on victims’ conversations or tap into a live video feed. The LifeShield brand is owned by security giant ADT. Specificall...

Apple Warns of 3 iOS Zero-Day Security Vulnerabilities Exploited in the Wild

Apple on Tuesday released updates for iOS, iPadOS, and tvOS with fixes for three security vulnerabilities that it says may have been actively exploited in the wild. Reported by an anonymous researcher, the three zero-day flaws — CVE-2021-1782, CVE-2021-1870, and CVE-2021-1871 — could have allowed...

Huawei Manageone 注入漏洞

Huawei Manageone is a cloud data center management solution from China's Huawei. The product supports unified management of heterogeneous cloud resource pools, and provides functions such as multi-level VDC matching customer organization model, service catalog planning, self-service, centralized...

TikTok Bug Could Have Exposed Users' Profile Data and Phone Numbers

Cybersecurity researchers on Tuesday disclosed a now-patched security flaw in TikTok that could have potentially enabled an attacker to build a database of the app's users and their associated phone numbers for future malicious activity. Although this flaw only impacts those users who have linked...

The vulnerabilities of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server are due to insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of AppX Deployment Extensions in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of AppX Deployment Extensions in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

SonicWall Breach Stems from ‘Probable’ Zero-Days

UPDATE SonicWall is investigating “probable” zero-day flaws in its remote access security products that have been targeted by “highly-sophisticated” attackers. The company says it is investigating the attack and will update customers within 24 hours. The security company said it is currently...

Exclusive: SonicWall Hacked Using 0-Day Bugs In Its Own VPN Product

SonicWall, a popular internet security provider of firewall and VPN products, on late Friday disclosed that it fell victim to a coordinated attack on its internal systems. The San Jose-based company said the attacks leveraged zero-day vulnerabilities in SonicWall secure remote access products suc...

The vulnerability of AppX Deployment Extensions in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of AppX Deployment Extensions in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Devices Under Attack by New FreakOut Malware

Researchers are warning a novel malware variant is targeting Linux devices, in order to add endpoints to a botnet to then be utilized in distributed-denial-of-service DDoS attacks and cryptomining. The malware variant, called FreakOut, has a variety of capabilities. Those include port scanning,...

A Set of Severe Flaws Affect Popular DNSMasq DNS Forwarder

Cybersecurity researchers have uncovered multiple vulnerabilities in Dnsmasq, a popular open-source software used for caching Domain Name System DNS responses, thereby potentially allowing an adversary to mount DNS cache poisoning attacks and remotely execute malicious code. The seven flaws,...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software allows a hacker to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software environment is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...