10295 matches found
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to remote code execution in the target system. CVE: CVE-2020-5145 Last updated: Oct. 28, 2020, 9:39 a.m...
2020 DDoS Extortion Campaign -- A Sequel More Thrilling Than the Original
Costarring Susan McReynolds and Tom Emmons As you might imagine, as the go-to enterprise DDoS mitigation experts, our phones have been "ringing off the hook" as the global extortion DDoS campaign sequel rages on. It's bigger, badder, and features a broader cast of criminal characters than seen...
Akamai Edge Cloud: Scaling IoT, Part 2
IoT has tremendous possibilities to transform our world but will fall short of expectations if the underlying infrastructure cannot support the rapid exchange of massive amounts of information from billions of simultaneous and intermittent connections. Akamai Edge Cloud is designed to enable the...
North Korean Advanced Persistent Threat Focus: Kimsuky
Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques. This joint cybersecurity advisory was coauthored by the Cybersecurity and...
eden-global.com Cross Site Scripting vulnerability OBB-1437775
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Oracle PeopleSoft Enterprise HCM Global Payroll Core Security Denial of Service Vulnerability
Oracle PeopleSoft Enterprise HCM Global Payroll is a rules-based payroll calculation solution from Oracle Corporation USA. A denial of service vulnerability exists in Oracle PeopleSoft Enterprise HCM Global Payroll Core Security version 9.2 that could allow a low-privileged attacker to compromise...
CVE-2020-14778
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...
CVE-2020-14778
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...
Code injection
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...
CVE-2020-14778
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...
CVE-2020-14778
The CVE-2020-14778 vulnerability affects Oracle PeopleSoft Enterprise HCM Global Payroll Core (Security, v9.2). The issue is exploitable over the network (HTTP) with low privileges and can lead to unauthorized update/insert/delete, unauthorized read access, and partial denial of service on People...
api-global.17app.co Improper Access Control vulnerability OBB-1430300
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Vulnerabilities fixed in Oracle PeopleSoft
Oracle has fixed vulnerabilities in the following Oracle PeopleSoft products: PeopleSoft Enterprise HCM Global Payroll Core PeopleSoft Enterprise PT PeopleTools PeopleSoft Enterprise SCM eSupplier Connection The vulnerabilities allow an unauthenticated malicious person with network access to the...
Waze app vulnerability allowed users’ real-time location tracking
By Waqas Waze app has more than 130 million active monthly users globally and that makes it a lucrative target for hackers. Here's what happened. This is a post from HackRead.com Read the original post: Waze app vulnerability allowed users real-time location tracking...
2020 DDoS Extortion Campaign -- A Sequel More Thrilling Than the Original
As the go-to enterprise distributed denial-of-service DDoS mitigation experts, our phones have been "ringing off the hook" since the release of the global extortion DDoS campaign sequel. This latest installment of the cybersecurity saga is bigger, badder, and features a broader cast of criminal...
global-auctions.de Cross Site Scripting vulnerability OBB-1418665
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
presentation.globalstonefactory.com Cross Site Scripting vulnerability OBB-1413053
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for Cross-site Scripting in Blinger
CVE-2019-13633 Suggested description: Blinger.io v.1.0.2...
global-control.de Cross Site Scripting vulnerability OBB-1410910
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
brinca.global Cross Site Scripting vulnerability OBB-1409488
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...