1074 matches found
Empowering employees to securely work from anywhere with an internet-first model and Zero Trust
Like many this year, our Microsoft workforce had to quickly transition to a work from the home model in response to COVID-19. While nobody could have predicted the world’s current state, it has provided a very real-world test of the investments we have made implementing a Zero Trust security mode...
modern-master.com Cross Site Scripting vulnerability OBB-1426468
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
modern-master.com Cross Site Scripting vulnerability OBB-1415850
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
2021 Detection and Response Planning, Part 2: Driving SOC Efficiency With a Detections-First Approach to SIEM
This is the second installment of our series around 2021 security planning. In part one, Rapid7 Detection and Response Practice Advisor Jeffrey Gardner offered tips and advice for ramping up annual security planning. In this installment, we’ll explore the importance of reliable and comprehensive...
GHSA-77G4-36JP-5V3M Remote Memory Disclosure in bittorrent-dht
Versions of bittorrent-dht prior to 5.1.3 are affected by a remote memory disclosure vulnerability. This vulnerability allows an attacker to send a specific series of of messages to a listening peer and get it to reveal internal memory. There are two mitigating factors here, that slightly reduce...
JITSploitation II: Getting Read/Write
Posted by Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed i...
Acronis: Reflected XSS via "Error" parameter on https://admin.acronis.com/admin/su/
Summary Hello, There is possible to inject arbitrary HTML constructions on the page /admin/su/. The problem is in the insufficient escaping of special characters like for the Error parameter. If this parameter contains a specially crafted vector, the application will return the page that will...
CVE-2020-5919
In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel TMM to stop responding...
CVE-2020-5919
In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel TMM to stop responding...
CVE-2020-5919
In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel TMM to stop responding...
Contrast Community Edition Empowers Developers to Write Secure Code Faster
As software eats the world, the world faces a software security crisis. The movement to modern software such as cloud technologies and microservice architectures is essential to innovate quickly. Yet, nearly three in four developers say that security slows down Agile and DevOps. Neither developer...
Contrast Community Edition Empowers Developers to Write Secure Code Faster
As software eats the world, the world faces a software security crisis. The movement to modern software such as cloud technologies and microservice architectures is essential to innovate quickly. Yet, nearly three in four developers say that security slows down Agile and DevOps. Neither developer...
Replace PGP With an HTTPS Form
I asked my Twitter followers what I should talk about in this issue, and those trolls picked PGP and security vulnerability reporting, so here goes nothing. As you probably know, the school of modern cryptography thinking I subscribe to says that tools and protocols should be small, simple, and...
Activision Infinity Ward Call of Duty Modern Warfare 2 Buffer Overflow Vulnerability
Activision Infinity Ward Call of Duty Modern Warfare 2 Call of Duty is an American first-person shooter game by Activision. A buffer overflow vulnerability exists in Activision Infinity Ward Call of Duty Modern Warfare 2 2019-12-11 and earlier versions. An attacker can exploit this vulnerability ...
CVE-2019-20893
An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHostHandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim'...
CVE-2019-20893
CVE-2019-20893 concerns a buffer overflow in Activision Infinity Ward’s Call of Duty Modern Warfare 2 (and up to 2019-12-11). The vulnerability is located in the PartyHost_HandleJoinPartyRequest function, exploitable via a crafted joinParty packet, which can yield arbitrary code execution on a vi...
Release information for Veeam Backup for Microsoft 365 4c
NOTE A cumulative patch is now available, click here for more information Veeam Backup for Microsoft 365 4c cumulative patch KB4099. IMPORTANT The GA build of Veeam Backup for Microsoft 365 version 4c build 4.0.1.519 was recalled due to a backup sync issue identified by Veeam quality assurance. I...
Veeam Backup for Microsoft 365 Modern App-Only Authentication Limitations
Information Veeam Backup for Microsoft 365 v8 and higher Due to Microsoft's deprecation of Basic Authentication, the only option available when adding a new Microsoft 365 organization to Veeam Backup for Microsoft 365 v8 is Modern App-Only Authentication. Veeam Backup for Microsoft 365 v7 and v7a...
‘Modern Bank Heists’ Threat Report Finds Dramatic Increase in Cyberattacks Against Financial Institutions Amid COVID-19
This marks the third edition of the Modern Bank Heists report, which takes an annual pulse of some of the financial industry’s top CISOs and security leaders. Thank you, again, for reading along and thank you to the 25 security leaders who participated in this year’s survey. This survey offers mo...
[SECURITY] Fedora 32 Update: php-horde-horde-5.2.22-1.fc32
The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...