CVE-2020-14389

Keycloak CVE-2020-14389 affects Keycloak prior to 12.0.0. A user with only the view-profile role could manage resources in the New Account Console, enabling access and modification of data the user should not have. The root cause is an elevation of privilege enabling restricted users to perform a...

Authorization

IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The...

CVE-2020-4763

CVE-2020-4763 affects IBM Sterling File Gateway: vulnerable versions are 6.0.0.0–6.0.3.2 and 2.2.0.0–2.2.6.5_2, where authorization tokens and session cookies are missing the Secure attribute. This allows cookie values to be exposed if users click on an http link or visit a site containing such a...

CVE-2020-4671

CVE-2020-4671 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The issue is an information disclosure where potentially sensitive data can be read from log files by an authenticated user. IBM’s Security Bulletin details the affected versions and p...

CVE-2020-27191

LionWiki

CVE-2019-19557

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at the ISC² Security Congress 2020, November 16, 2020. I’ll be on a panel at the OECD Global Blockchain Policy Forum 2020 on November 17, 2020. The panel is called "Deep Dive: Digital Security and Distributed Ledger...

CVE-2020-7962

CVE-2020-7962 affects One Identity Password Manager 5.8. An attacker can enumerate valid answers for a user by distinguishing response content; a valid answer can be detected because WRONG ID is only returned when the answer is incorrect. This can enable reuse of a correct answer for later passwo...

CVE-2020-25155

CVE-2020-25155 affects NEXCOM NIO 50 devices; the vulnerability is cleartxt transmission of sensitive information (cleartext transmission of sensitive data). All versions of NIO 50 are affected. The issue arises from transmitting unencrypted sensitive information, which may allow an attacker to a...

CVE-2020-8696

CVE-2020-8696 is an information-disclosure issue in Intel processors resolved by microcode updates. The vulnerability arises from improper removal of sensitive data before storage/transfer, enabling a local attacker with authenticated access to potentially disclose information. Connected advisori...

CVE-2020-17101

CVE-2020-17101 is a Windows HEIF Image Extensions remote code execution vulnerability. The NVD entry assigns CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) with local attack vector, low complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The...

CVE-2020-17078

CVE-2020-17078 relates to the Windows Raw Image Extension and is documented as a remote code execution vulnerability. Multiple connected sources confirm the issue stems from the Raw Image Extension component, with independent advisories citing a buffer overflow that could be exploited by a specia...

CVE-2020-16983

Azure Sphere: A tampering vulnerability due to insufficient access control in the Azure Sphere OS allows privilege escalation. Affected: Microsoft Azure Sphere (OS). Root cause per PT-2020-4810 is insufficient access control; impact includes privilege escalation. No fix/version details are provid...

CVE-2020-16127

CVE-2020-16127 is described as an Ubuntu-specific modification to AccountsService prior to version 0.6.55-0ubuntu13.2 that would perform unbounded reads of user-controlled ~/.pam_environment files, enabling an infinite loop if /dev/zero is symlinked to that location. The impact cited is a local i...

Dive Deep into VMDR

Qualys devoted the second day of the QSC USA 2020 virtual conference entirely to vulnerability management, detection and response VMDR, a critical area for the security and compliance of hybrid cloud IT environments. Mehul Revankar, VP of Product Management and Engineering for VMDR at Qualys, set...

Windows Graphics Component Information Disclosure Vulnerability

...

CVE-2020-8276

Summary: CVE-2020-8276 affects Brave Desktop’s privacy-preserving analytics (P3A) from versions 1.1–1.18.35, where the implementation logged the timestamp of the last incognito window, including Tor windows, instead of excluding Tor. What is affected / root cause: The P3A component logged a times...

SuiteCRM 7.11.15 - 'last_name' Remote Code Execution (Authenticated)

Exploit Title: SuiteCRM 7.11.15 - 'lastname' Remote Code Execution Authenticated Date: 08 NOV 2020 Exploit Author: M. Cory Billington @th3y Vendor Homepage: https://suitecrm.com/ Software Link: https://github.com/salesagility/SuiteCRM Version: 7.11.15 and below Tested on: Ubuntu 20.04 LTS CVE:...

tousu.qdnzxfj.gov.cn Cross Site Scripting vulnerability OBB-1494933

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

U.S. Dept Of Defense: Reflected XSS on https://███/████via hidden parameter "█████████"

Hi everyone : I found a Reflected XSS on https://█████/█████████via hidden parameter "██████████". Steps To Reproduce: - Use your favorite web browser - Go to : https://█████/████████&██████=XXX%22%3E%3Cscript%3Ealert%27Reflected%20XSS%20here%27%3C/script%3E An XSS is triggered ! The initial page...