How to Share Your Netflix, Hulu, Amazon, and Spotify Accounts the Safe Way

Be generous, but also be careful...

Ring Makes 2-Factor Authentication Mandatory Following Recent Hacks

Smart doorbells and cameras bring a great sense of security to your home, especially when you're away, but even a thought that someone could be spying on you through the same surveillance system would shiver up your spine. Following several recent reports of hackers gaining access to people's...

PT-2021-18631

Name of the Vulnerable Software and Affected Versions Seafile version 7.0.5 Description The issue allows for Persistent XSS via the share of library functionality. This means an attacker can inject malicious scripts into the library sharing feature, potentially affecting users who access the shar...

GitLab EE elevation of privilege vulnerability (CNVD-2020-13199)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. An elevation of privilege vulnerability exists in GitLab EE...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

Design/Logic Flaw

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

Removed by vendor...

chromium-browser: Insufficient policy enforcement in CORS

Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page...

chromium-browser: Incorrect security UI in sharing

Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...

PT-2020-20284 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition EE versions 12.5.0 through 12.7.5 Description: The issue allows project access to unauthorized users when a group is shared with another group. Recommendations: For GitLab Enterprise Edition EE versions 12.5.0 throug...

CVE-2020-8795: Undefined Security Weakness

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

Easy File Sharing Web Server 7.2 Buffer Overflow

!/usr/bin/python Exploit Title: Easy File Sharing Web Server v7.2 - POST 'Email' Unauthenticated Remote Buffer Overflow Exploit Author: boku aka Bobby Cooke Date: February 7th, 2020 Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/efssetup.exe Version: 7.2...

Nextcloud Input Validation Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud is vulnerable to an input validation error. The vulnerability originates from a network system or product that does not properly validate incoming...

Easy File Sharing Web Server 7.2 Unquoted Service Path

Exploit Title: Easy File Sharing Web Server v7.2 - 'Easy File Sharing Web Service' Unquoted Service Path Exploit Author: boku Date: 02/10/2020 Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/efssetup.exe Version: 7.2 Tested On: Windows 10 32-bit Recreate: ...

I know where you rode last summer: Uncovering the security issues of shared scooter services

We recently discovered flaws in the security of shared electric scooter services that have worrying implications for the safety and privacy of their users. Not only is it possible to remotely ring the bells of scooters all over the world, but external parties are able to track the location and...

Gitlab -- Vulnerability

Gitlab reports: Incorrect membership handling of group sharing feature...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-13558)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...