6722 matches found
Windows Imaging Component Information Disclosure Vulnerability
An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system. There are multiple ways an attacker...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...
The vulnerability of the Windows Data Sharing Service, a data exchange service for the Windows operating system, allows attackers to escalate their privileges.
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability of the Windows Data Sharing Service, a data exchange service for the Windows operating system, allows attackers to escalate their privileges.
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
CVE-2019-19614
An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an identical password. Fixed in Release 10.24.11206.1...
CVE-2020-9282
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios...
Code injection
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios...
CVE-2020-9282
Mahara is affected in versions 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2. The vulnerability allows certain personal information to be discoverable by inspecting network responses on the Edit access screen when sharing portfolios. Root cause details are not provided in t...
Spread of Coronavirus-Themed Cyberattacks Persists with New Attacks
As the coronavirus blows up into a worldwide pandemic, threat actors continue to exploit the disease to spread malware. Just this week, cybersecurity professionals identified a bevy of new threats ranging from coronavirus-themed malware attacks, booby-trapped URLs and credential stuffing scams. O...
Cross-site Scripting (XSS)
Cross-Origin Resource Sharing CORS Filter is vulnerable to cross-site scripting XSS attacks. The vulnerability exists because the returned exception messages in 'CORSOriginDeniedException' reflects the origin in the request header allowing an attacker to inject and execute arbitrary Javascript to...
The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
RSAC 2020: Ransomware a 'National Crisis,' CISA Says, Ramps ICS Focus
Industrial control systems ICS and critical infrastructure will be a main focus for the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency CISA this year – especially as ransomware looms as a main threat to the sector going forward. That’s according to Christopher...
How to Share Your Netflix, Hulu, Amazon, and Spotify Accounts the Safe Way
Be generous, but also be careful...
Ring Makes 2-Factor Authentication Mandatory Following Recent Hacks
Smart doorbells and cameras bring a great sense of security to your home, especially when you're away, but even a thought that someone could be spying on you through the same surveillance system would shiver up your spine. Following several recent reports of hackers gaining access to people's...
GitLab EE elevation of privilege vulnerability (CNVD-2020-13199)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. An elevation of privilege vulnerability exists in GitLab EE...
CVE-2020-8795
In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...
CVE-2020-8795
In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...