38678 matches found
Peloton Bike+ Bug Gives Hackers Complete Control
The popular Peloton Bike+ and Peloton Tread exercise equipment contain a security vulnerability that could expose gym users to a wide variety of cyberattacks, from credential theft to surreptitious video recordings. According to research from McAfee’s Advanced Threat Research ATR team, the bug no...
[SECURITY] Fedora 34 Update: seamonkey-2.53.7-5.fc34
SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...
Arbitrary File Download Vulnerability in Flying FishStar Next-Generation Firewall Security Gateway
Chengdu Flying Fish Star Technology Co., Ltd. is one of the few local enterprises in the industry with independent intellectual property rights and independent R & D capabilities, focusing on the digital communication industry, the Internet of Things industry product innovation and research and...
Logic Flaw Vulnerability in Byzoro Networks Smart Multi-service Security Gateway Intelligent Management Platform
Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A logic flaw vulnerability exists in Byzoro's Smart Multi-service Security Gateway Intelligent Management Platform. Attackers...
The vulnerability of the Mobile Expenses component of the Oracle Internet Expenses financial management application allows a malicious user to gain access to update, modify, or delete data.
The vulnerability of the Mobile Expenses component of the Oracle Internet Expenses financial management application relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to gain access to update, modify, or delete data using the HTTP protocol...
Utilities ‘Concerningly’ at Risk from Active Exploits
The amount of time that utility networks spend exposed to a known application exploit has spiked over the past two months — something analysts called out as a “concerning datapoint,” and an important reminder that ransomware isn’t the only threat utility networks need to secure against. A new...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: Ill be part of a European Internet Forum virtual debate on June 17, 2021. The topic is "Decrypting the encryption debate: How to ensure public safety with a privacy-preserving and secure Internet?" I’m speaking at the all-online...
Logic Flaw Vulnerability in Tengyi Sky Firewall v2
TengYi Network is an Internet service provider specializing in providing domestic and international anti-attack protection. A logic flaw vulnerability exists in Tengyi Sky Firewall v2, which can be exploited by attackers to obtain sensitive information...
CVE-2021-25418
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...
CVE-2021-25419
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...
CVE-2021-25418
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...
CVE-2021-25419
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...
CVE-2021-25400
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...
CVE-2021-25400
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...
Design/Logic Flaw
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...
Code injection
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...
Information disclosure
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...
CVE-2021-25400
CVE-2021-25400 affects Samsung Internet prior to 14.0.1.20. The vulnerability is described as an intent redirection that could let an attacker execute a privileged action. Public technical details in connected sources are limited to the affected product and the version before the patch; exploitat...
