LAOBANCMS 代码问题漏洞

LAOBANCMS is a content management system based on PHP and MySQL. LAOBANCMS v2.0 version of the existence of arbitrary file upload vulnerability, the vulnerability stems from the unrestricted file upload allows remote attackers can exploit the vulnerability to upload arbitrary files, the method is...

WhatsApp is reportedly working on web version without connected phone

By Waqas Apparently, WhatsApp is working on a Universal Windows Platform that would let you use the app on a PC without using your smartphone. This is a post from HackRead.com Read the original post: WhatsApp is reportedly working on web version without connected phone...

CVE-2021-3464

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation...

pcstore.com.tw Cross Site Scripting vulnerability OBB-1961598

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pcstore.com.tw ---|--- Open Bug Bounty...

Binary vulnerability in jpeg file parsing in Lovecraft Universal Connections PC version

The official version of Lovecraft Universal Player is a universal video and audio playback tool created by Lovecraft. Love Qiyi universal player belongs to the universal player, can support most of the mainstream media formats. It also supports the functions of watching pictures, skinning,...

OpenSSL Vulnerabilities Sep 2020 - Feb 2021

Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A remote attacker may be able to decrypt encrypted communication from an SSL/TLS connection, downgrade a newly established SSL/TLS connection to SSLv2,...

Employee PC hacked via TeamViewer in attempted water supply poisoning

By Waqas Unknown hackers tried to poison the water supply that could have harmed thousands of residents in Oldsmar, Tampa, Florida. This is a post from HackRead.com Read the original post: Employee PC hacked via TeamViewer in attempted water supply poisoning...

New Surface PCs enable virtualization-based security (VBS) by default to empower customers to do more, securely

VBS and HVCI-enabled devices help protect from advanced attacks Escalation of privilege attacks are a malicious actor’s best friend, and they often target sensitive information stored in memory. These kinds of attacks can turn a minor user mode compromise into a full compromise of your OS and...

DLL Hijacking Vulnerability in ReadWriteWriter PC for Windows

ReadWrite PC is a multifunctional synchronization tool for PC of smart office book launched by ReadWrite Technology, a subsidiary of KDDI. A DLL hijacking vulnerability exists in ReadWrite PC for Windows, which can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03449)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

DLL hijacking vulnerability exists in Lovecraft Universal Link PC version (CNVD-2021-03523)

Aqiyi Universal Connections for PC is a local player tool from Aqiyi. There is a DLL hijacking vulnerability in Aqiyi Universal Media Player for PC, which can be exploited by attackers to gain control of the server...

Baidu.com PC version suffers from dll hijacking vulnerability

Baidu.com is a cloud service product. A dll hijacking vulnerability exists in the PC version of Baidu.com Disk. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability

Tiger Tooth Live PC Client is a game live streaming tool. The Tiger Tooth Live PC Client suffers from a dll hijacking vulnerability that stems from incorrect handling of runtime directory paths. An attacker can exploit this vulnerability by placing a malicious DLL file in a specific location on t...

Tiger Tooth Live PC Extreme Client suffers from dll hijacking vulnerability

Tiger Tooth Live PC Extreme Client is a game live streaming software. Tiger Tooth Live PC Extreme Client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to gain control of the server...

Penguin Gaming PC client suffers from DLL hijacking vulnerability

Penguin Gaming PC client is the largest mobile gaming platform under Tencent. A DLL hijacking vulnerability exists in the Penguin Gaming PC client. An attacker can exploit this vulnerability to execute malicious code...

DLL Hijacking Vulnerability in Lovecraft PC Client (CNVD-2021-01845)

Aiki is a PC client software that focuses on video playback. A DLL hijacking vulnerability exists in AikiYi PC client. An attacker can exploit this vulnerability to execute malicious code...

Binary Vulnerability in PC-cillin Antivirus Edition

Pc-Cillin is an anti-virus software from Trend Micro that is mainly used for wireless Internet access and home network management. A binary vulnerability exists in the antivirus version of PC-Cillin, which can be exploited by attackers to gain server control privileges...

Command Execution Vulnerability in Emblem Win PC Version (Traditional Chinese)

Huawei Win PC Version is a stock financial terminal newly launched by Huaan Securities. There is a command execution vulnerability in Huawei PC Edition Traditional Chinese version, which can be exploited by attackers to inject executable DLL files into the client process and execute arbitrary...

Research: Stealing data from air-gapped PC by turning RAM into Wi-Fi Card

By Deeba Ahmed Israeli Researchers Discover New Data Exfiltration Technique by Turning RAM into Wi-Fi Card. Here's what the researchers have found out. This is a post from HackRead.com Read the original post: Research: Stealing data from air-gapped PC by turning RAM into Wi-Fi Card...

ctdb, libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2020:5439 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...