The vulnerability of the IBM Robotic Process Automation software lies in errors in the user interface’s information representation, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the IBM Robotic Process Automation software is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially create...

CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

CVE-2022-39380

CVE-2022-39380 affects the Wire web-app. Prior to 2022-11-02, certain Markdown formats can trigger an unhandled error during HTML rendering, causing DoS-like symptom where the affected chat history cannot be displayed. The issue is fixed in version 2022-11-02 and deployed on Wire managed services...

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

The vulnerability of FortiWAN’s traffic balancing system allows a attacker to perform a spoofing attack.

The vulnerability of the FortiWAN traffic balancing system is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor, operating remotely, to perform a spoofing attack...

The vulnerability of the Microsoft Outlook email client for the MacOS operating system, related to information representation errors in the user interface, allows attackers to perform spearishing attacks.

The vulnerability of the Microsoft Outlook email client for the MacOS operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created email message...

The vulnerability of Microsoft Exchange Server servers, related to errors in information representation by the user interface, allows attackers to perform spoofing attacks.

The vulnerability of Microsoft Exchange Server is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

The vulnerability of Microsoft Office packages, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Office packages is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

The vulnerability in the user interfaces of Google Chrome and Microsoft Edge allows attackers to carry out spear-phishing attacks.

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge is related to information representation errors in the user interfaces. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created web page...

The vulnerability of the Mozilla Firefox browser, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

GHSA-C439-CHV8-8G2J `os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddr

The ossocketaddr crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. These layout were changed into idiomatic rust...

DeepTraffic - Deep Learning Models For Network Traffic Classification

For more information please read our papers.  Wei Wang's Google Scholar Homepage Wei Wang, Xuewen Zeng, Xiaozhou Ye, Yiqiang Sheng and Ming Zhu,"Malware Traffic Classification Using Convolutional Neural Networks for Representation Learning," in the 31st International Conference on Information...

[SECURITY] Fedora 36 Update: ghex-42.3-1.fc36

GHex can load raw data from binary files and display them for editing in the traditional hex editor view. The display is split in two columns, with hexadecimal values in one column and the ASCII representation in the other. A useful tool for working with raw data...

The vulnerability of Skype for Business Server in corporate communication servers lies in the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Skype for Business Server’s corporate communication servers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

[SECURITY] Fedora 34 Update: libxml2-2.9.14-1.fc34

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

The vulnerability in the isolated environment of the iframe in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a malicious actor to disclose protected information.

The vulnerability in the isolated environment of the Firefox web browser, Firefox ESR, and Thunderbird email client relates to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge relates to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

The vulnerability in the BizTalk Server BizTalk ESB Toolkit allows a attacker to perform a spoofing attack.

The vulnerability of the BizTalk Server BizTalk ESB Toolkit relates to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

Increasing Representation of Women in Security Research

Microsoft is committed to partnering with and supporting women in security research. Whether it’s growing women early in their career, or connecting people with mentors, we want to be a part of the journey. Throughout Womens History Month we intentionally sought opportunities to engage with women...