Business-Dna Solution GmbH TopEase 跨站脚本漏洞

Business-Dna Solution GmbH TopEase is a "Transformational Risk" solution from Business-Dna Solution GmbH, Switzerland. It is used to manage complex projects and initiatives comprehensively, simply, quickly and securely. A code injection vulnerability exists in Business-Dna Solution GmbH TopEase,...

Pega Infinity patches authentication vulnerability

Security researchers came across a Pega Infinity vulnerability through participation in Apple’s bug bounty program, after focusing on vendors that supplied technology to Apple. By using Burp Suite—an integrated platform for performing security testing of web applications—the security researchers...

Blue Cedar partners with Microsoft to combat BYOD issues

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Bring Your Own Device BYOD has been a divisive topic within corporations for years. Employees wanted the convenience of working on their own smart devices, and business decision-make...

CVE-2020-16938

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on ...

Windows GDI+ Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it...

PT-2020-4253 · Microsoft · Windows Kernelstream +1

Name of the Vulnerable Software and Affected Versions: Windows KernelStream affected versions not specified Description: An information disclosure issue exists due to the Windows KernelStream's improper handling of objects in memory. This could allow an attacker to obtain information that could b...

PT-2019-2998 · Symantec +1 · Symcrypt +1

Name of the Vulnerable Software and Affected Versions: SymCrypt affected versions not specified Description: An information disclosure issue exists in SymCrypt during the OAEP decryption stage, allowing an attacker to obtain information that could be used to further compromise the user's system. ...

PT-2019-3027

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A denial of service issue exists due to improper handling of objects in memory by Windows. An attacker could exploit this by running a specially crafted application on an affected system,...

Ubuntu-Maker Canonical's GitHub Account Gets Hacked

An unknown hacker yesterday successfully managed to hack into the official GitHub account of Canonical, the company behind the Ubuntu Linux project and created 11 new empty repositories. It appears that the cyberattack was, fortunately, just a "loud" defacement attempt rather than a "silent"...