Verizon Media, PayPal, Twitter Top Bug-Bounty Rankings

Bug-bounty programs have become a popular way for vendors to root out security flaws in their platforms, attracting talented white-hats with the promise of big rewards. According to HackerOne’s 2020 List of the Top 10 Bug Bounty Programs on its platform, Verizon Media, PayPal and Uber are in the...

The vulnerability of the Windows Error Reporting Manager’s error report dispatcher in Microsoft Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Error Reporting Manager’s error reporting dashboard in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

The vulnerability of the Windows Error Reporting service on Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Error Reporting service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Critical Bugs and Backdoor Found in GeoVision's Fingerprint and Card Scanners

GeoVision, a Taiwanese manufacturer of video surveillance systems and IP cameras, recently patched three of the four critical flaws impacting its card and fingerprint scanners that could've potentially allowed attackers to intercept network traffic and stage man-in-the-middle attacks. In a report...

The vulnerability of the Cisco IOS operating system’s image file checking function, related to deficiencies in access control, allows attackers to install malicious software.

The vulnerability of the Cisco IOS operating system’s image file checking function is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to install malicious software...

The vulnerability of the SCADA platform for remote oil and gas applications from Emerson’s OpenEnterprise, related to the improper implementation of authentication mechanisms, allows attackers to trigger a service failure.

The vulnerability of the SCADA platform for remote oil and gas applications from Emerson’s OpenEnterprise platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Webex, Router Bugs Allow Code Execution

Cisco is warning of three high-severity flaws in its popular Webex web conferencing app, including one that could allow an unauthenticated attacker to remotely execute code on impacted systems. Beyond Webex, the networking giant on Wednesday also patched a slew of bugs across several products,...

CVE-2020-3368

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input validation of URLs. An...

CVE-2020-3277

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected...

CVE-2020-3274

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected...

CVE-2020-3275

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected...

Adobe Acrobat and Reader are vulnerable to logic flaws

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader are vulnerable to logic flaws. Attackers can use the vulnerability to bypas...

AcidBox Malware Uncovered Using Repurposed VirtualBox Exploit

Advanced malware, dubbed AcidBox, has been identified by researchers who say a mysterious cybergang used it twice against Russian organizations as far back as 2017. In a report released Wednesday, Palo Alto Networks’ Unit 42 sheds new light onto attacks against the popular open-source...

Adobe Patches 18 Critical Flaws in Out-Of-Band Update

Adobe patched 18 critical vulnerabilities Tuesday impacting key products Adobe After Effects, Illustrator, Premiere Pro, Premiere Rush and Audition. The out-of-band fixes address vulnerabilities allowing an attacker to execute arbitrary code, if bugs are exploited. In its security bulletin Adobe...

New Mobile Internet Protocol Vulnerabilities Let Hackers Target 4G/5G Users

High impact vulnerabilities in modern communication protocol used by mobile network operators MNOs can be exploited to intercept user data and carry out impersonation, fraud, and denial of service DoS attacks, cautions a newly published research. The findings are part of a new Vulnerabilities in...

OX App Suite / OX Documents 7.10.3 XSS / SSRF / Improper Validation Vulnerabilities

OX App Suite and OX Documents versions 7.10.3 and below suffer from server-side request forgery, cross site scripting, improper parameter validation, and XML injection vulnerabilities. Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in findi...

Critical Intel Flaws Fixed in Active Management Technology

Intel has released its June security updates, which address two critical vulnerabilities that, if exploited, can give unauthenticated attackers elevated privileges. The critical flaws exist in Intel’s Active Management Technology AMT, which is used for remote out-of-band management of personal...

The vulnerability of the Android operating system’s touchscreen interface on Samsung mobile devices, which allows a hacker to turn Bluetooth on or off.

The vulnerability of the Android operating system’s touchscreen interface on Samsung mobile devices is related to authentication deficiencies. Exploiting this vulnerability could allow a hacker to turn on or off Bluetooth...

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers arises from improperly implemented data filtering during input processing. This allows attackers to alter the contents of project configuration files.

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to improperly implemented data filtering. Exploiting this vulnerability allows a malicious actor to remotely modify the contents of project configuration files...

The vulnerability of the Cisco IOx software platform for the Cisco IOS XE operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Cisco IOx software platform for the Cisco IOS XE operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code...