CVE-2020-8559

creationtimestamp| type| source ---|---|--- 2020-07-16 12:44:47+00:00| seen| https://t.me/k8security/87 2020-07-22 07:09:48+00:00| seen| https://t.me/k8security/88 2024-04-25 20:29:29+00:00| seen| https://t.me/arpsyndicate/4856...

Top MSRC 2020 Q2 Security Researchers Announced – Congratulations!

We are excited to announce the top contributing researchers for the 2020 Second Quarter Q2! Congratulations to all the researchers who continue to rock the leaderboard, and a big thank you to everyone for your contribution to securing our customers and the ecosystem. The top three researchers of...

Security Update Validation Program (SUVP) のご紹介

本記事は、What is the Security Update Validation Program? の日本語抄訳です。 Security Update Validation Program は、マイクロソフトが毎月第二火曜 米国時間...

Mainstream European bank hit by largest ever PPS based DDoS attack

By Waqas The DDoS attack on the bank was recorded in packets-per-second Pps and... This is a post from HackRead.com Read the original post: Mainstream European bank hit by largest ever PPS based DDoS attack...

Largest Ever Recorded Packet Per Second-Based DDoS Attack Mitigated by Akamai

On June 21, 2020, Akamai mitigated the largest packet per second PPS distributed denial-of-service DDoS attack ever recorded on the Akamai platform. The attack generated 809 million packets per second Mpps, targeting a large European bank...

Hakbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

A ransomware campaign, dubbed Hakbit, is targeting mid-level employees across Austria, Switzerland and Germany with malicious Excel attachments delivered via the popular email provider GMX. The spear-phishing based campaign is low volume and so far targeted the pharmaceutical, legal, financial,...

HTTP Request Smuggling

goliath is vulnerable to HTTP Request Smuggling. The vulnerability exists as it allows multiple content-length headers to be sent, and prioritizes the second content-length instead of the first...

Record 0-Second SLA PPS Mitigation

Record-High 312 Mpps Attack Mitigated in 0 Seconds On May 2, 2020, Akamai blocked a large PPS-focused attack against one of our financial services customers in 0 seconds, utilizing a proactive mitigation posture. This was one of the largest PPS levels we have on record, and the biggest mitigated ...

Beijing Chain Home Real Estate Brokerage Co. Chain Home app suffers from denial-of-service vulnerability

Chain Home App is an official client of Chain Home, a large-scale real estate leasing and trading website. Chain Home App provides services of second-hand houses, new houses, rental houses, real estate finance and wealth management, real estate appraisal and other business types. There is a...

QRadar Community Edition 7.3.1.6 PHP Object Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ PHP object injection vulnerability in QRadar Forensics web application ------------------------------------------------------------------------ Abstract...

SQL Injection Vulnerability in Ricoh's 2nd Generation Management Information System

formerly Beijing Rizheng Software Design & Research Institute Co., Ltd. was founded in July 1995, is a national high-tech enterprise, "double-soft" software enterprise, software product certified enterprises. A SQL injection vulnerability exists in the RIZONE 2nd Generation Management Information...

Marriott Suffers Second Breach Exposing Data of 5.2 Million Hotel Guests

International hotel chain Marriott today disclosed a data breach impacting nearly 5.2 million hotel guests, making it the second security incident to hit the company in recent years. "At the end of February 2020, we identified that an unexpected amount of guest information may have been accessed...

FreeCommander XE 2020 Pathname Buffer Overflow Exploit

!/usr/bin/python Exploit Title: FreeCommander XE 2020 - Pathname Buffer Overflow SEH Version: Build 810a 32-bit Software Link: https://freecommander.com/downloads/FreeCommanderXE-32-publicsetup.zip Exploit Author: Hodorsec email protected / email protected Vendor Homepage:...

Centreo 19.10.8 - DisplayServiceStatus Remote Code Execution

Centreo 19.10.8 - DisplayServiceStatus Remote Code Execution Exploit Title: Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution Date: 2020-03-25 Exploit Author: Engin Demirbilek Vendor Homepage: https://www.centreon.com/ Version: 19.10.8 Tested on: CentOS Advisory link:...

Centreo 19.10.8 - (DisplayServiceStatus) Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution Exploit Author: Engin Demirbilek Vendor Homepage: https://www.centreon.com/ Version: 19.10.8 Tested on: CentOS Advisory link:...

AZL-6819 CVE-2020-10108 affecting package python-twisted for versions less than 22.2.0-1

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request...

At 21 Tbps, Reaching New Levels of IPv6 Traffic

The global adoption of IPv6 is important to the future of the internet and Akamai has been committed to helping move IPv6 deployment forward ever since we launched production IPv6 support in 2012...

SuiteCRM Second Order PHP Object Injection Vulnerability

SuiteCRM is a free and open source customer relationship management application. A security vulnerability exists in SuiteCRM. An attacker can exploit the vulnerability to inject arbitrary PHP objects into the application scope, allowing the attacker to perform various attacks, such as executing...

SuiteCRM 7.11.11 Second-Order PHP Object Injection

--------------------------------------------------------------------- SuiteCRM = 7.11.11 Second-Order PHP Object Injection Vulnerabilities --------------------------------------------------------------------- - Software Link: https://suitecrm.com/ - Affected Versions: Version 7.11.11 and prior...

SuiteCRM Bean Operation Vulnerability

SuiteCRM is a free and open source customer relationship management application. SuiteCRM has a bean manipulation vulnerability. The vulnerability is due to the "HealEngutsRe::ActhOnthAvieHTMLField" method which allows the creation of new beans or modification of fields of arbitrary beans. An...