February 9, 2021—KB4601366 (Security-only update)

None None...

February 9, 2021—KB4601363 (Security-only update)

None None...

Epikur Security Breach

Epikur is a healthcare mobile application from German company Epikur that provides users with psychotherapy, patient management, and other functions. A security vulnerability exists in Epikur before 20.1.1, which stems from a function that checks a submitted password against an MD5 hash of the...

Smarty Media New Media Smarty Security Breach

Smarty Media New Media Smarty is a software for demand management practices from Smarty Media, a German company This product is provided to anesthesiologists, psychotherapists, psychiatrists, neurologists and physicians who specialize in demand management practices. A security vulnerability exist...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as stand-alone executable programs and ActiveX spaces. A buffer overflow vulnerability...

Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office TextMaker

A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in SoftMaker's TextMaker software. A user could trigger these vulnerabilities by opening an attacker-created, malicious document. An adversary could use these...

Enigma Machine Recovered from the Baltic Sea

Neat story: German divers searching the Baltic Sea for discarded fishing nets have stumbled upon a rare Enigma cipher machine used by the Nazi military during World War Two which they believe was thrown overboard from a scuttled submarine. Thinking they had discovered a typewriter entangled in a...

The chronicles of Emotet

More than six years have passed since the banking Trojan Emotet was first detected. During this time it has repeatedly mutated, changed direction, acquired partners, picked up modules, and generally been the cause of high-profile incidents and multimillion-dollar losses. The malware is still in...

Clop ransomware hits Software AG, demands $20 million+ ransom

By Waqas Software AG, a German tech giant had its helpdesk and internal communication systems disrupted after the Clop ransomware attack. Over the weekend, Germanys second-largest tech firm Software AG suffered a ransomware attack. The company had to shut down many of its internal systems...

Healthcare security update: death by ransomware, what’s next?

A recent ransomware attack which played a significant role in the death of a German woman has put into focus both the dangers and the importance of cybersecurity today. But it has also led some to point fingers as to who was responsible. As usual, playing the blame game helps no one, but it does...

A Patient Dies After a Ransomware Attack Hits a Hospital

The outage resulted in a significant delay in treatment. German authorities are investigating the perpetrators on suspicion of negligent manslaughter...

BlueLeaks Server Seized By German Police: Report

German authorities have reportedly seized a server hosting the massive BlueLeaks data dump, which was released earlier in June and exposed thousands of sensitive police department and law enforcement files. According to a Wednesday report by PCMag, the server was based in Falkenstein, Germany and...

German Police seize DDoSecrets server hosting BlueLeaks data dump

By Waqas The BlueLeaks data dump contained sensitive information on Police, Fusion centers which were recently leaked by WikiLeaks-like service called DDoSecrets. German police have seized a server that hosted the BlueLeaks data dump. As previously reported, BlueLeaks referees to a leaked databas...

Phishing Attack Hits German Coronavirus Task Force

Researchers are warning of an ongoing phishing attack that’s targeting the credentials of more than 100 high-profile executives at a German multinational corporation that’s tasked with procuring coronavirus medical gear for Germany. The company, left unnamed by researchers, is part of a task forc...

App Layering 2001: Can't Finalize Layer - An error occurred while finalizing version '1.7' of Layer 'Windows 10 1909 German'

After installing the latest Cumulative Update, Cannot finalize the Version. Getting Error Message: An error occurred while finalizing version '1.7' of Layer 'Windows 10 1909 German'...

xt:Commerce 5.4.1 / 6.2.1 / 6.2.2 Improper Access Control Vulnerability

xt:Commerce version 5.4.1, 6.2.1, and 6.2.2 suffer from an improper access control vulnerability. A logged-in customer can create and alter addresses. These addresses are referenced by incrementing IDs. On saving an address, an attacker could change the ID of the address to write the data to. If...

November 11, 2014 update for SharePoint Server 2010 Office Web Apps (KB2889835)

November 11, 2014 update for SharePoint Server 2010 Office Web Apps KB2889835 This article describes update KB2889835 for Microsoft SharePoint Server 2010 Office Web Apps that was released on November 11, 2014. This update has a prerequisite. Fixes and Improvements Improves German proofing tools ...

Bundeswehr Karriere - Cross Site Scripting Vulnerability

Document Title: =============== Bundeswehr Karriere - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2214 Video: https://www.vulnerability-lab.com/getcontent.php?id=2197 Release Date: ============= 2020-04-18...

openSUSE Security Update : python-nltk (openSUSE-2020-436)

This update for python-nltk fixes the following issues : Update to 3.4.5 boo1146427, CVE-2019-14751 : - CVE-2019-14751: Fixed Zip slip vulnerability in downloader for the unlikely situation where a user configures their downloader to use a compromised server boo1146427 Update to 3.4.4 : - fix bug...

openSUSE: Security Advisory for python-nltk (openSUSE-SU-2020:0436-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...