Making the Edge Come Alive

In April 2019, Netflix viewers streamed 164 million hours of on-demand content per day. Fast forward a year. In April 2020, Twitch streamed 55 million hours per day. The vast majority of that was live. We have seen the future of video. It is live. But live workflows have challenges and requiremen...

Media Services Live Features Upgrades to Support Modern-Day Live-Streaming Needs

Media Services Live MSL is Akamai's flagship solution for preparing live streams to provide broadcast-grade streaming quality for our live-streaming customers. MSL provides purpose-built key capabilities with liveOrigin, including ingest acceleration to map encoders to optimal entry points on the...

File Upload Vulnerability in Big Ant Instant Messaging Backend

Big Ant Instant Messenger Soft is a powerful enterprise office communication software. A file upload vulnerability exists in the backend of BigAnt Instant Messenger, which can be exploited by attackers to gain server privileges...

New Web-Based Credit Card Stealer Uses Telegram Messenger to Exfiltrate Data

Cybercriminal groups are constantly evolving to find new ways to pilfer financial information, and the latest trick in their arsenal is to leverage the messaging app Telegram to their benefit. In what's a new tactic adopted by Magecart groups, the encrypted messaging service is being used to send...

New web skimmer steals credit card data, sends to crooks via Telegram

The digital credit card skimming landscape keeps evolving, often borrowing techniques used by other malware authors in order to avoid detection. As defenders, we look for any kind of artifacts and malicious infrastructure that we might be able to identify to protect our users and alert affected...

CVE-2020-1487

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log onto ...

CVE-2020-0249

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

SQL Injection Vulnerability in Instant Messaging Manager

Instant Messaging Manager is a tool that combines communication capabilities. Instant Messaging Manager suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

HPESBNW04014 rev.2 - HPE Aruba Networking Local Unauthorized Disclosure of Information (Aka "Kr00k" Vulnerability)

Potential Security Impact: Local: Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Instant IAP-204 IL 802.11n/ac Dual 2x2:2 Radio Antenna Connectors AP All versions. Aruba Instant IAP-204 JP 802.11n/ac Dual 2x2:2 Radio Antenna Connectors...

Needle - Instant Access To You Bug Bounty Submission Dashboard On Various Platforms + Publicly Disclosed Reports + #Bugbountytip

Chrome extension for Instantaccess to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any bookmark,...

Cannot edit configuration of VMware VM via ESXi after Instant Recovery from Veeam Agent backup

Challenge When you complete Instant VM Recovery from the Veeam Agent backup, then try to edit the VM configuration via ESXi, the following error occurs: "Enter a disk size which is larger than its original capacity." Then you try to edit the decimal virtual disk size via ESXi, and another error...

Shanghai Chat Network Technology Co. Chaoxin APP has denial-of-service vulnerability

Chaoxin APP is an instant messaging IM application for security developed by Shanghai Chat Network Technology Co. Ltd. Chaoxin APP suffers from a denial of service vulnerability, which can be exploited by attackers to cause a denial of service...

Potential data loss when using Instant VM Recovery

Challenge Performing Instant VM Recovery in VMware vSphere environments may result in data loss when using the quick migration feature to move published VM disks to production storage to finalize the recovery. This issue was identified internally by Veeam quality control in late 2019, and the fix...

Why Our Customers Love VMware Carbon Black

As the cybersecurity world advances, organizations are starting to change their approach to security. More and more teams are moving to the cloud to maximize their endpoint protection and simplify their security stack. Using VMWare Carbon Black's Cloud platform, our customers are able to...

PT-2020-8028 · Aruba · Aruba Instant

Name of the Vulnerable Software and Affected Versions: Aruba Instate versions prior to 4.1.3.0 Aruba Instate versions prior to 4.2.3.1 Description: The issue is caused by insufficient validation of user-supplied input and insufficient checking of parameters. This could allow a malicious user to...

CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

The vulnerability of Adobe Connect’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Adobe Connect instant messaging program is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

The vulnerability of the client’s /roster/module.val module for instant messaging between dinosaurs, related to incorrect authorization, allows a violator to compromise data integrity.

The vulnerability of the /roster/module.vala client for instant messaging in Dino involves insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

The vulnerability of the Skype for Business Server’s instant messaging program, related to errors in information presentation by the user interface, allows attackers to carry out spoofing attacks.

The vulnerability of the Skype for Business Server’s instant messaging program is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spam attacks remotely...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...