14 matches found
Top 5 AI-Powered Social Engineering Attacks
Social engineering has long been an effective tactic because of how it focuses on human vulnerabilities. There's no brute-force 'spray and pray' password guessing. No scouring systems for unpatched software. Instead, it simply relies on manipulating emotions such as trust, fear, and respect for...
HCL Technologies HCL Sametime Information Disclosure Vulnerability
HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6 that stems from a lack of external URL absorption in FaviconService, which could be exploited by an attacker to specify the external URL where the online meeting...
Design/Logic Flaw
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place...
CVE-2021-27770
CVE-2021-27770 affects HCL Sametime with the FaviconService, where a base64-encoded URL is requested by the webserver and can be used via the meetings function to direct the online meeting to an external URL. The root cause is described as lack of external URL absorption in FaviconService, enabli...
CVE-2021-27770 HCL Sametime is vulnerable to arbitrary HTTP requests
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place...
online2meeting.com Cross Site Scripting vulnerability OBB-1302977
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
NFL Tackles Cybersecurity Concerns Ahead of 2020 Draft Day
The NFL draft is slated to start Thursday, and thanks to the COVID-19 pandemic, it will be the first virtual version of the event ever presented. This raises a few cybersecurity concerns, according to researchers and the teams themselves — but the NFL is planning on knocking the security ball...
Cisco WebEx Network Recording Player Denial of Service Vulnerability
A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...
WebEx browser extension command execution
Added: 01/26/2017 CVE: CVE-2017-3823 BID: 95737 Background Cisco WebEx is an online meeting solution. Extensions are available for all major web browsers, which enable users to join meetings from their browser. Problem A vulnerability in the WebEx browser extensions allows command execution when ...
用友TruboCRM管理系统 /background/onlinemeetingstatus.php ID 参数SQL注入漏洞
No description provided by source...
Description of the cumulative update for Lync Server 2010, Conferencing Server: April 2011
Describes the bug that is resolved in the April, 2011 cumulative update package for Lync Server 2010, Conferencing Server.Summary This article describes the Microsoft Lync Server 2010 issue that is fixed in the cumulative update for Lync Server 2010, Conferencing Server that is dated April, 2011...
Two Hyundai Capital Services hackers arrested !
Two Hyundai Capital Services hackers arrested ! Two men who are believed to have hacked into the computer system of Hyundai Capital Services have been arrested. The pair, identified only by their surnames Heo and Yu are believed to be part of a group of five individuals who carried out the hack...
Cross site scripting
Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...