Denial of Service Vulnerability in KingCloud Personal Edition Antivirus (CNVD-2020-67090)

KingCloud Personal Antivirus is an anti-virus engine that integrates anti-virus, real-time protection and proactive defense for personal end devices by Tatsunobuilder. KingCloud Personal Antivirus has a denial-of-service vulnerability that can be exploited by attackers to cause a computer crash v...

Denial of Service Vulnerability in KingCloud Personal Edition Antivirus

KingCloud Personal Antivirus is an anti-virus engine that integrates anti-virus, real-time protection and proactive defense for personal end devices by Tatsunobuilder. KingCloud Personal Antivirus has a denial-of-service vulnerability that can be exploited by attackers to cause a computer crash v...

[SECURITY] Fedora 33 Update: pngcheck-2.3.0-3.fc33

pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...

CVE-2020-27747

An issue was discovered in Click Studios Passwordstate 8.9 Build 8973.If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote attacker has the opportunity to conduct a brute force attack on this PIN code. As resul...

Home Depot Confirms Data Breach in Order Confirmation SNAFU

Home Depot has exposed the private order confirmations of hundreds of Canadian consumers, containing names, physical addresses, email addresses, order details and partial credit-card information. After customers began reporting that they had received hundreds of emails from the home-improvement...

Command Execution Vulnerability in the PC Client of HuaxiaYunCai.com

Huaxia Cloud Finance PC Client is a financial management software. A command execution vulnerability exists in Huaxia Yun Cai Network PC Client. An attacker can exploit the vulnerability to execute arbitrary code...

virginia-personal-injury-lawyers.com Cross Site Scripting vulnerability OBB-1439177

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

virginia-personal-injury-lawyers.com Cross Site Scripting vulnerability OBB-1427567

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

U.S. Dept Of Defense: Reflected XSS www.█████ search form

Description: Reflected XSS vulnerabilities arise when the application accepts a malicious input script from a user and then this is executed in the victim's browser.Since the XSS is reflected, the attacker has to trick the victim into executing the payload, usually using another website. In this...

Command Execution Vulnerability in NetEase Email Master PC Client Software

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports all-platform device login. Netease Email Master pc client software has a command execution vulnerability that can b...

Command Execution Vulnerability in Flying Book PC Client Software

Flybook deeply integrates instant communication, calendar, audio/video conferencing, cloud documents, cloud disk, mailbox and workbench, and through the open and compatible platform, members can realize efficient communication and smooth collaboration in one place, and improve the efficiency of...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61775)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. Microsoft Windows and Windows Server have an elevation of privilege vulnerability that can be exploited by...

Command Execution Vulnerability in Forbidden Notes pc Client Software

Weizhi Notes is located in the high-efficiency work notes, the main work notes of the mobile application, is currently a "work notes" cloud note products. A command execution vulnerability exists in the Weizhi Notes pc client software, which can be exploited by an attacker to gain control of the...

Tencent Document pc client software suffers from a command execution vulnerability

Tencent Document is an online document that can be edited by multiple people at the same time, supporting online Word/Excel/PPT/PDF/collection form multiple types. Tencent Document pc client software has a command execution vulnerability that can be exploited by an attacker to gain control of the...

Command Execution Vulnerability in Haozitong Cloud Conference PC Version

GoodVision Cloud Meeting for PC is a platform developed for video conferencing offices. A command execution vulnerability exists in GoodView Cloud Meeting PC Edition, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Scholastic Pepperdine's pc Client

Scholastic Premium is a deeply customized service-based app for Scholastic Premium students. A command execution vulnerability exists in the Scholastic Premium pc client, which can be exploited by an attacker to gain control of the server...

Broadvoice Leak Exposes 350M Records, Personal Voicemail Transcripts

UPDATE Broadvoice, a well-known VoIP provider that serves small- and medium-sized businesses, has leaked more than 350 million customer records related to the company’s “b-hive” cloud-based communications suite. The data includes hundreds of thousands of voicemail transcripts, many involving...

Carnival Corp. Ransomware Attack Affects Three Cruise Lines

Hackers accessed personal information of guests, employees and crew for three cruise line brands and the casino operations of Carnival Corp. in a ransomware attack the company suffered on Aug. 15, officials have confirmed. Carnival Cruise Line, Holland America Line and Seabourn were the brands...

Microsoft Windows and Windows Server Information Disclosure Vulnerability (CNVD-2021-71945)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. Microsoft Windows and Windows Server are vulnerable to an information disclosure vulnerability that stems...

Unauthorized Access Vulnerability in the University Version of the Psychological Assessment System of Shanghai Huicheng Consulting Co.

Psychological Assessment System University Edition is a comprehensive software integrating psychological assessment, crisis warning, psychological profile and other functions, supporting both PC assessment and mobile assessment. An unauthorized access vulnerability exists in the University Editio...