8369 matches found
new-condo.ru Cross Site Scripting vulnerability OBB-1466581
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
new-revelation.net Cross Site Scripting vulnerability OBB-1465309
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Logic Flaw Vulnerability in Ad***.php File in Zibo's New X1.0 System
Zibo's new X1.0 system is a website management system based on the latest thinkphp5 framework. A logic flaw vulnerability exists in the Ad.php file of the Qibo New X1.0 system. An attacker can exploit the vulnerability to forge a super administrator cookie and log in to the system as a super...
New Relic: Account takeover by using abandoned email id of victim which has already been changed to new by victim himself on one.newrelic.com
@ashmek identified an inconsistency with account mapping between New Relic One and the discussion forum. This resulted in a situation where a user who has changed their email address could have contents of their account displayed to a new user who had access to the original email address...
DDoS attacks in Q3 2020
News overview Q3 was relatively calm from a DDoS perspective. There were no headline innovations, although cybercriminals did continue to master techniques and develop malware already familiar to us from the last reporting period. For example, another DDoS botnet joined in the assault on Docker...
SUSE-SU-2020:3060-1 Security update for binutils
This update for binutils fixes the following issues: binutils was updated to version 2.35. jscECO-2373 Update to binutils 2.35: The assembler can now produce DWARF-5 format line number tables. Readelf now has a 'lint' mode to enable extra checks of the files it is processing. Readelf will now...
CVE-2018-4339
This issue was addressed with a new entitlement. This issue is fixed in iOS 12.1. A local user may be able to read a persistent device identifier...
USN-4603-1 mariadb-10.1, mariadb-10.3 vulnerabilities
It was discovered that MariaDB didn't properly validate the content of a packet received from a server. A remote attacker could use this vulnerability to sent a specialy crafted file to cause a denial of service. CVE-2020-13249 It was discovered that MariaDB has other security issues. An attacker...
new-revelation.net Cross Site Scripting vulnerability OBB-1454143
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Vulnerability fixed in management console for 3PAR systems
HP has fixed a vulnerability in the StoreServ Management Console SSMC. SSMC is the Web-based management application for 3PAR StoreServ systems but can also be used to manage other storage systems. The vulnerability allows a malicious remotely able to bypass authentication. HP rates this...
new-spark.com Cross Site Scripting vulnerability OBB-1444631
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-9771
This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system...
Microsoft Dynamics CRM 2011 Update Rollup 12
Microsoft Dynamics CRM 2011 Update Rollup 12 INTRODUCTION Update Rollup 12 for Microsoft Dynamics CRM 2011 will be available January 2013. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported ...
new-era-ekb.ru Cross Site Scripting vulnerability OBB-1429949
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Dynamic Data Resolver - Version 1.0.1 beta
By Holger Unterbrink. Cisco Talos is releasing a new beta version of Dynamic Data Resolver DDR today. This release comes with a new architecture for samples using multi-threading. The process and thread tracing has been completely reimplemented. We also fixed a few bugs and memory leaks. Another...
The Impossible Dilemma of Twitter’s ‘Hacked Materials’ Rule
The company’s flip-flopping on the policy after banning a shady New York Post story highlights the challenges facing social media in 2020...
Getting around the cybersecurity talent shortage
More remote workers mean larger attack surfaces, and as cyber criminals take advantage of the rush to provision a remote workforce, the pain of the cybersecurity professionals shortage has become acute. Last year, the ISC2 Workforce Study identified a shortage of 561,000 cybersecurity professiona...
PT-2020-5779 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to the is blog installed function in wp-includes/functions.php, which improperly checks if WordPress is already installed. This could allow a remote attacker to perform a new...
Akamai Drives New Standards and Enhances Authoritative DNS and Load Balancing Services
For more than 20 years, Akamai's customers have trusted our global edge platform to deliver their content, secure their web applications, and accelerate end-user experiences. As the basis for our mapping functions, Akamai DNS has always been essential to the reliability and performance of our...
CVE-2020-3427
The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Windows Logon, cause Denia...