6722 matches found
11 security tips to help stay safe in the COVID-19 era
The COVID-19 pandemic has changed our daily routines, the ways we work, and our reliance on technology. Many of us are now working remotely, students are attending classes virtually, and we’re relying more on social media and social networks to stay connected as we define what our new normal look...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...
Can Governments Defeat Nation-State Attacks on Critical Infrastructures?
For physical conflicts, we expect our government to protect us from nation-state adversaries. It turns out, though, that industrial enterprises are much better positioned to defeat most nation-state attacks on power plants, pipelines, and other critical infrastructures than governments are. For...
Unspecified Vulnerability in Abstrium Pydio Cells
Abstrium Pydio Cells is a next-generation file-sharing platform developed in the Go language by Abstrium France. A security vulnerability exists in Abstrium Pydio Cells version 2.0.4. The vulnerability can be exploited by an attacker to obtain the associated hidden account username and password,...
Nextcloud: Allows any user to share their "Root" level folder by sharing "."
There seems to be a bug in the "File to Share" feature of Nextcloud Talk. This allows any authenticated user/admin to share their "root" level folder by manipulating the "path": parameter in the JSON body request to the remote API /nextcloud/ocs/v2.php/apps/filessharing/api/v1/shares Steps to rep...
Zoom Client Application Chat Code Snippet Remote Code Execution Vulnerability
Summary An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat message can cause an arbitrary binary planting which could be abused to achieve arbitrary code execution. An attacke...
Nextcloud: Re-Sharing allows increase of privileges
User A shares a file/folder to user B with re-sharing permission, but readonly - User B shares this file/folder to User C Needs the shareapidefaultpermissions set to 1 all checkmarks off in admin panel - User B can add write permissions for the share to User C User C may also be anonymous using a...
Creating a HAR file from your browser to share with support
IMPORTANT: Please note that HAR files contain sensitive clear text data including content of pages while recording, such as user names, passwords, keys, etc, and should only be shared with trusted recipients via secure channels such ashttps://cis.citrix.com.Sharing files via email is not...
The vulnerability of the Local Download Sharing Service, a traffic analyzer for computer networks by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the Local Download Sharing Service, a traffic analyzer for computer networks in Wireshark, is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
CVE-2020-6479
Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page...
CVE-2020-6479
Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page...
LinkedIn: LinkedIn users primary email + full name visibilty
Vulnerability description not provided...
CVE-2020-12889
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...
CVE-2020-12889
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...
PYSEC-2020-66
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...
Design/Logic Flaw
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...
PYSEC-2020-66
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...
Open-sourcing new COVID-19 threat intelligence
A global threat requires a global response. While the world faces the common threat of COVID-19, defenders are working overtime to protect users all over the globe from cybercriminals using COVID-19 as a lure to mount attacks. As a security intelligence community, we are stronger when we share...
Microsoft Windows Multiple Vulnerabilities (KB4556813)
This host is missing a critical security update according to Microsoft KB4556813 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the Microsoft RMS Sharing App for Mac operating systems lies in its insecure management of privileges. This allows a malicious user to install programs, view, modify, or delete data with the rights of an authorized user.
The vulnerability of the Microsoft RMS Sharing App for Mac operating systems lies in the insecure management of privileges. Exploiting this vulnerability could allow a malicious individual to install programs, view, modify, or delete data with the rights of an authorized user...