India Witnessed Spike in Cyber Attacks Amidst Covid-19 - Here's Why?

The COVID-19 outreach is turning out to be not only health, social, and economic hazard but also a cybersecurity crisis. The pandemic has presented new challenges for businesses in the areas of remote collaboration and business continuity. With increased remote working for better business...

VulnCheck KEV: CVE-2018-8389

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

Command Execution Vulnerability in D-Shield_Firewall of Shenzhen DiYuan Technology Co.

D ShieldFirewall is an active defense protection software designed for IIS. D ShieldFirewall has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

Beyond Speed and Reliability: Security Is a New Differentiator

Homes have always been hubs; now they're even more so. Some jobs shifted to work from home, and many children are experiencing distance learning at bedroom desks or kitchen tables or whatever is available. Traditional workplaces like large businesses, government agencies, and other organizations...

Internet Freedom Has Taken a Hit During the Covid-19 Pandemic

From surveillance to arrests, governments are using the novel coronavirus as cover for a crackdown on digital liberty...

Adobe Flash Player Microsoft Edge and Internet Explorer Security Update (APSB20-58) - Windows

Adobe Flash Player is prone to an arbitrary code execution vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DEBIAN-CVE-2020-25645

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The...

October 13, 2020—KB4580328 (OS Build 16299.2166)

None None...

October 13, 2020—KB4580327 (OS Build 10240.18725) - EXPIRED

None None...

October 13, 2020—KB4580353 (Security-only update)

None None...

October 13, 2020—KB4580382 (Monthly Rollup)

None None...

Directory Traversal Vulnerability in Zhiyuan A8

Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet is a high-tech enterprise integrating product design, research and development, sales and service, providing customers with professional collaborative management software products, solutions, platforms and cloud services, and is a...

PT-2020-4249 · Microsoft · Windows Tcp/Ip Stack +1

Name of the Vulnerable Software and Affected Versions: Windows TCP/IP stack affected versions not specified Description: A remote code execution issue exists due to improper handling of ICMPv6 Router Advertisement packets by the Windows TCP/IP stack. This allows an attacker to execute arbitrary...

Visualize Visitor Prioritization in Real Time with mPulse

The internet has become one of the most important access points in our daily lives. Unexpected surges in demand can slow web pages and create service outages for unprepared websites. A poor user experience leads to dissatisfied customers, making it more critical than ever to visualize and control...

Split-Second ‘Phantom’ Images Can Fool Tesla’s Autopilot

Researchers found they could stop a Tesla by flashing a few frames of a stop sign for less than half a second on an internet-connected billboard...

SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of Harbin Zhonglong Baiying Technology Development Co.

Harbin Zhonglong Baiying Technology Development Co., Ltd. was founded on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. Harbin Zhonglong Baiying Technology Development Co., Ltd. has a SQL injection vulnerability in the...

Cisco Video Surveillance 8000 Series IP Cameras Resource Management Error Vulnerability

Cisco Video Surveillance 8000 Series IP Cameras is a video surveillance camera from Cisco USA. A resource management error vulnerability exists in Cisco Video Surveillance 8000 Series IP Cameras. The vulnerability arises from improper management of system resources e.g., memory, disk space, files...

Metasploit Wrap-Up

SAP Internet Graphics Server IGS This week includes a new module targeting the SAP Internet Graphics Server application, contributed by community member Vladimir Ivanov. This particular module covers two CVEs that are both XML External Entity XXE bugs that are remotely exploitable. The module com...