Directory traversal

In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...

CVE-2019-13450

In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...

CVE-2019-13450

CVE-2019-13450 affects Zoom Client for macOS up to version 4.4.4 (and RingCentral 7.0.136380.0312) where any web site can interact with the local Zoom Web server on localhost ports 19421/19424, allowing a remote attacker to force a user to join a video call with the camera active. Root cause: ins...

Zoom Client Information Disclosure (Webcam) CVE-2019-13450

In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...

Threat Outbreak Alert RuleID20477: Email Messages Distributing Malicious Software on January 15, 2016

Medium Alert ID: 43042 First Published: 2016 January 15 20:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20477 may contain the following files: Name |...

Threat Outbreak Alert RuleID20053: Email Messages Distributing Malicious Software on December 11, 2015

Medium Alert ID: 42647 First Published: 2015 December 11 21:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20053 may contain the following files: Name |...

Unfixed XSS vulnerability at service.ringcentral.com

Security researcher C1c4Tr1Z, has submitted on 01/05/2008 a cross-site-scripting XSS vulnerability affecting service.ringcentral.com, which at the time of submission ranked 13459 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/05/2008. It is...