Using Live Query to Audit Your Environment for the Windows CryptoAPI Spoofing Vulnerability

This week, as part of its monthly patch Tuesday release, Microsoft disclosed an important security vulnerability CVE-2020-0601 affecting millions of Windows 10 and Windows Server 2016 & 2019 systems. More specifically, this vulnerability is a result of the way Windows CryptoAPI validates Elliptic...

Twitch Has Become a Haven for Live Sports Piracy

As the platform gains more mainstream popularity, illicit livestreams of soccer, boxing, and MMA matches have become trivial to find...

SQL Injection Vulnerability in Micro Edge Live of Shenzhen Micro Edge Information Technology Co.

Shenzhen Micro Edge Information Technology Co., Ltd. is a WeChat third-party service for regional self-publishers, and has released six categories of products: dating, matchmaking, live broadcasting, recruitment, real estate, and carpooling. A SQL injection vulnerability exists in Shenzhen Micro...

live-score-app.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1066373 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting live-score-app.com website...

TuxResponse - Linux Incident Response

TuxResponse is incident response script for linux systems written in bash. It can automate incident response activities on Linux systems and enable you to triage systems quickly, while not compromising with the results. Usually corporate systems would have some kind of monitoring and control, but...

CVE-2019-20224

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Pattern Live PC client suffers from dll hijacking vulnerability

Fancy Live is Tencent's live Internet interactive entertainment platform. Figure live PC version of the existence of dll hijacking vulnerability, attackers can use the vulnerability to execute arbitrary code...

Security update for spectre-meltdown-checker (moderate)

openSUSE Security Update: Security update for spectre-meltdown-checker Announcement ID: openSUSE-SU-2019:2710-1 Rating: moderate References: 1117665 1139073 Cross-References: CVE-2018-12207 CVE-2019-11135 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now...

CCTV Video for PC suffers from dll hijacking vulnerability

CCTV for PC is a live network TV broadcasting software. CCTV Video for PC suffers from a dll hijacking vulnerability, which can be exploited by attackers to load dll files and execute arbitrary code...

SUSE SLED15 / SLES15 Security Update : spectre-meltdown-checker (SUSE-SU-2019:3348-1)

This update for spectre-meltdown-checker fixes the following issues : - feat: implement TAA detection CVE-2019-11135 bsc1139073 - feat: implement MCEPSC / iTLB Multihit detection CVE-2018-12207 bsc1117665 - feat: taa: add TSXCTRL MSR detection in hardware info - feat: fwdb: use both Intel GitHub...

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

Cross site scripting

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

CVE-2019-18571: Improper Neutralization of Input During Web Page Generation

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

PT-2019-15524

Name of the Vulnerable Software and Affected Versions RSA Identity Governance and Lifecycle versions prior to 7.1.1 P03 RSA Via Lifecycle and Governance versions prior to 7.1.1 P03 Description The issue concerns a reflected cross-site scripting vulnerability in the My Access Live module. An...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Live Share Extension RCE

The vulnerability of the Live Share extension of the Microsoft Visual Studio development tool is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious URL by convincing them to connect to a specially created Live Share...

ASUS ZenFone 3 Ultra Access Control Error Vulnerability

The ASUS ZenFone Live is a smartphone from Asus ASUS of Taiwan, China. Asus ZenFone Live build fingerprint: asus/WWPhone/ASUSX00LD3:7.1.1/NMF26F/14.0400.1806.203-20180720: user/release-keys in the com.asus. An access control error vulnerability exists in the atd.smmitest app. The vulnerability...