Florida Ethics Officer Charged with Cyberstalking

A Tallahassee city ethics officer was arrested and charged with cyberstalking her coworker and former lover, and is now banned by a judge from using the internet for anything besides work, paying bills and her legal defense. Julie Meadows-Keef is accused of cyberstalking Bert Fletcher, the...

The vulnerability of the Windows operating system, related to the lack of protection for service data, allows a perpetrator to disclose protected information in Windows error reports.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose sensitive information contained in Windows error reports...

CVE-2021-3129

creationtimestamp| type| source ---|---|--- 2021-01-12 18:52:35+00:00| seen| https://t.me/cibsecurity/21947 2021-01-23 14:27:59+00:00| published-proof-of-concept| Telegram/V0JRptGFrgnQJ2SXhKrSjD8wR0dUer2UmfcxEmcwlwjBg 2021-01-24 14:36:01+00:00| seen| https://t.me/CyberSecurityTechnologies/2562...

CVE-2020-35726

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Reports/index.jsp file via the by parameter. NOTE: This vulnerability only affects products that are no longer supported by t...

Cross site scripting

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Reports/index.jsp file via the by parameter. NOTE: This vulnerability only affects products that are no longer supported by t...

CVE-2020-35726

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Reports/index.jsp file via the by parameter. NOTE: This vulnerability only affects products that are no longer supported by t...

PT-2021-11838 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "/WebCM/Applications/Reports/index.jsp" file via the by parameter. This...

Quest Policy Authority For Unified Communications Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A cross-site scripting vulnerabili...

CVE-2020-36112

creationtimestamp| type| source ---|---|--- 2021-01-04 19:10:47+00:00| seen| https://t.me/cibsecurity/21547 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

VulnCheck KEV: CVE-2012-3152

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems...

vulscan

This is a Python-based web application for vulnerability scanning and management. The application is built using Django and has several features, including: 1. Vulnerability Scanning: The application can scan for vulnerabilities in websites and applications using a list of predefined POC Proof of...

CVE-2020-26831

SAP BusinessObjects BI Platform Crystal Report, versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file...

PT-2020-5294 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for system data in the Windows operating system. It allows an attacker to disclose protected information in Windows error reports. This can...

CVE-2020-13942

creationtimestamp| type| source ---|---|--- 2020-11-23 03:53:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2119 2020-11-23 09:45:55+00:00| published-proof-of-concept| https://t.me/cKure/2943 2020-11-24 20:46:57+00:00| seen| https://t.me/cibsecurity/16796 2023-11-22...

CVE-2020-11831

OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1...

Code injection

OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1...

CVE-2020-11831

The CVE-2020-11831 entry concerns Oppo’s OvoiceManager (v2.0.1) that grants the system permission to write vulnerability reports for arbitrary files. The root cause is improper permission handling within OvoiceManager, enabling writes to arbitrary file paths with SYSTEM privileges, which can lead...

OPPO Oppo OvoiceManager Security Vulnerability

OPPO Oppo OvoiceManager is a voice management service for devices from China's OPPO Guangdong Mobile Communications OPPO. A security vulnerability exists in version 2.0.1 of com.oppo.ovoicemanager that stems from OvoiceManager having system privileges to write vulnerability reports for arbitrary...

FAMA - Forensic Analysis For Mobile Apps

LabCIF -Forensic Analysis for Mobile Apps Getting Started Android extraction and analysis framework with an integrated Autopsy Module. Dump easily user data from a device and generate powerful reports for Autopsy or external applications. Functionalities Extract user application data from an...

USN-4171-6: Apport regression

USN-4171-1 fixed vulnerabilities in Apport. The update caused a regression when handling configuration files. This update fixes the problem, and also introduces further hardening measures. Original advisory details: Kevin Backhouse discovered Apport would read its user-controlled settings file as...