4822 matches found
The vulnerability of the apport operating system’s error registration service, related to synchronization errors when using a shared resource, allows a malicious actor to create a publicly accessible report of the software bug for privileged processes.
The vulnerability of the apport operating system’s error registration service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to create a publicly accessible report of the software bug for privileged processes...
CVE-2020-8515
creationtimestamp| type| source ---|---|--- 2020-03-27 23:08:11+00:00| exploited| https://t.me/ctinow/21855 2020-04-06 14:30:02+00:00| exploited| https://t.me/SecLabNews/7285 2020-04-10 16:33:40+00:00| exploited| https://t.me/truesecator/456 2020-07-14 09:25:17+00:00| seen|...
March 2020 -- Akamai Edge Security: Leader in Five Forrester Wave Reports
Forrester has named Akamai a Leader in five different Wave and New Wave reports. This significant achievement reflects the strength of Akamai's intelligent edge platform for securing and delivering digital experiences across our entire security portfolio. Forrester Wave Leaders are the top vendor...
USN-4171-5: Apport regression
USN-4171-1 fixed vulnerabilities in Apport. This caused a regression in autopkgtest and python2 compatibility. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Apport would read its user-controlled settings file as the root...
$100K Paid Out for Google Cloud Shell Root Compromise
Google has awarded its inaugural annual top prize for the Google Cloud Platform GCP, for vulnerabilities found in the Google Cloud Shell. The find — a container escape that leads to host root access and the ability to use privileged containers — has earned $100,000 for Dutch researcher Wouter ter...
SAP Crystal Reports RPT File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP Crystal Reports. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
SAP Business Objects Business Intelligence Platform Code Injection Vulnerability
SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. A security vulnerability exists in SAP Business Objects Business...
CVE-2020-0796
creationtimestamp| type| source ---|---|--- 2020-03-10 22:20:17+00:00| exploited| https://t.me/ctinow/21179 2020-03-10 23:02:59+00:00| exploited| https://t.me/BleepingComputer/6947 2020-03-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=458 2020-03-11 09:46:14+00:00|...
CVE-2020-6208
SAP Business Objects Business Intelligence Platform Crystal Reports, versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of the application, leading to Remote Code Execution...
CVE-2020-6208
CVE-2020-6208 concerns SAP Business Objects Business Intelligence Platform (Crystal Reports) versions 4.1 and 4.2. Connected sources describe code injection/remote code execution vectors arising from Crystal Reports parsing/handling (e.g., ZDI-20-291). The NVD entry states a local attack that cou...
Real-life cybercrime stories from DART, the Microsoft Detection and Response Team
When we published our first blog about the Microsoft Detection and Response Team DART in March of 2019, we described our mission as responding to compromises and helping our customers become cyber-resilient. In pursuit of this mission we had already been providing onsite reactive incident respons...
Newly Declassified Study Demonstrates Uselessness of NSA's Phone Metadata Program
The New York Times is reporting on the NSA's phone metadata program, which the NSA shut down last year: A National Security Agency system that analyzed logs of Americans' domestic phone calls and text messages cost $100 million from 2015 to 2019, but yielded only a single significant investigatio...
CVE-2020-9054
creationtimestamp| type| source ---|---|--- 2020-02-26 10:20:27+00:00| published-proof-of-concept| https://t.me/truesecator/218 2020-02-26 12:10:02+00:00| exploited| https://t.me/xakepru/8765 2020-02-27 09:12:31+00:00| seen|...
Unspecified Vulnerability in Oracle Fusion Middleware Reports Developer (CNVD-2020-17119)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An unspecified vulnerability exists in Oracle Fusion Middleware Reports...
Unspecified Vulnerability in Oracle Fusion Middleware Reports Developer
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An unspecified vulnerability exists in Oracle Fusion Middleware Reports...
How AI Is Tracking the Coronavirus Outbreak
Machine-learning programs are analyzing websites, news reports, and social media posts for signs of symptoms, such as fever or breathing problems...
Native integrations in Wallarm WAF
How to configure sending reports to email? How to get a notification to the messenger about an event requiring a response? How to connect Wallam and other solutions that use DevOps and the security team? Integrations will help to solve all these issues in Wallam WAF. And today we'll talk about th...
Security Bulletin: Security Vulnerability in TIBCO Jasper Reports Affects IBM Sterling B2B Integrator (CVE-2018-5429)
Summary Security vulnerability in TIBCO Jasper Reports Affects IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2018-5429 DESCRIPTION: Multiple TIBCO JasperReports products could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw in the...
