PT-2020-7557

Name of the Vulnerable Software and Affected Versions: Tube Map Live Underground for Android versions prior to 3.0.22 Description: The issue is related to an information disclosure problem. Recommendations: For versions prior to 3.0.22, update to version 3.0.22 or later to resolve the issue...

CVE-2013-6681: Exposure of Sensitive Information to an Unauthorized Actor

Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure Vulnerability...

[SECURITY] Fedora 31 Update: texlive-base-20190410-8.fc31

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

Fedora: Security Advisory for texlive-base (FEDORA-2020-bb5c663b83)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Misp-Dashboard - A Dashboard For A Real-Time Overview Of Threat Intelligence From MISP Instances

A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of each...

Virtuozzo 7 : readykernel-patch (VZA-2019-074)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - 3.10.0-693.17.1.vz7.43.10 to 3.10.0-957.12.2.vz7.96.21 vhost-net: guest to host kernel escape during migration. A buff...

Symantec Mail Security for Exchange Live Update Priviledge Escalation Vulnerability (SYMSA1488)

The version of Symantec Mail Security for Exchange SMSMSE installed on the remote Windows host is affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to compromise the Live Update software application and gain elevated access to resources that ar...

Microsoft Offers Rewards of Up to $20,000 in New Xbox Bug Bounty Program

Microsoft is offering rewards of up to $20,000 for finding vulnerabilities in its Xbox gaming platform through its latest bug bounty program unveiled this week. The Xbox Bounty Program is open to gamers, security researchers and basically anyone who can help the tech giant identify security...

CVE-2013-2569

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...

CVE-2013-2569

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...

PT-2020-7393

Name of the Vulnerable Software and Affected Versions: Zavio IP Cameras versions 1.6.3 and earlier Description: A security issue exists due to the RTSP protocol authentication being disabled by default, which could allow a malicious user to obtain unauthorized access to the live video stream...

Authentication flaw

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-2121 1.06FR, 1.06, and 1.05RU, DCS-2102 1.06FR. 1.06, and 1.05RU, which could let a malicious user obtain sensitive information...

CVE-2013-1601

CVE-2013-1601 is an information-disclosure vulnerability in D-Link IP cameras where an unauthenticated attacker can access an ASCII output of the live video stream via /md/lums.cgi. Connected sources (CoreLabs CORE-2013-0303) confirm this vulnerability alongside related CVEs (1599, 1600, 1602, 16...

CVE-2013-1600

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-2121 1.06FR, 1.06, and 1.05RU, DCS-2102 1.06FR. 1.06, and 1.05RU, which could let a malicious user obtain sensitive information...

CVE-2013-1600

CVE-2013-1600 is an Authentication Bypass affecting multiple D-Link IP cameras (notably DCS-2102/2121 series with firmware such as 1.05_TESCO, 1.05_RU, 1.06, 1.06_FR, etc.). The vulnerability allows remote attackers to access live video streams without authentication via HTTP by exploiting the up...

CVE-2013-1601: Exposure of Sensitive Information to an Unauthorized Actor

An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in...

CVE-2020-8091

svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname...

Threat Source newsletter (Jan. 23, 2020)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. Despite tensions starting to fizzle between the U.S. and Iran, people are still worried about cyber conflict. What would that even look...

Threat Source newsletter (Jan. 16, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. This wasn’t your average Patch Tuesday. Microsoft’s monthly security update was notable for a few reasons. For starters, it’s really tim...

Huawei EulerOS: Security Advisory for texlive (EulerOS-SA-2019-2062)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...