12404 matches found
newyorkstore.dk Cross Site Scripting vulnerability OBB-1488413
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Windows Codecs Library RCE (October 2020)
The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability : - A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who...
Update Windows 10 to patch critical vulnerability in Microsoft store games
By Deeba Ahmed The high severity privilege escalation vulnerability tracked as CVE-2020-16877 affected Windows Server and Windows 10. This is a post from HackRead.com Read the original post: Update Windows 10 to patch critical vulnerability in Microsoft store games...
CVE-2020-2315
Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2020-2315
Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
Xxe
Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2020-2315
The CVE-2020-2315 issue affects Jenkins Visualworks Store Plugin versions 1.1.3 and earlier. The root cause is that the plugin’s XML parser does not disable XML External Entity (XXE) processing, enabling crafted XML to potentially reveal secrets from the Jenkins controller or facilitate SSRF-like...
CVE-2020-2315
Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
PT-2020-15549 · Jenkins · Jenkins Visualworks Store Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Visualworks Store Plugin versions 1.1.3 and earlier Description: The issue allows attackers with the ability to control the output of a script that runs Visualworks with StoreCI, or able to control an agent process, to have Jenkins...
televisie-store.nl Cross Site Scripting vulnerability OBB-1480238
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hyacinth.store Cross Site Scripting vulnerability OBB-1468493
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Home Depot Confirms Data Breach in Order Confirmation SNAFU
Home Depot has exposed the private order confirmations of hundreds of Canadian consumers, containing names, physical addresses, email addresses, order details and partial credit-card information. After customers began reporting that they had received hundreds of emails from the home-improvement...
Google Removes 21 Malicious Android Apps from Play Store
Google has stepped in to remove several Android applications from the official Play Store following the disclosure that the apps in question were found to serve intrusive ads. The findings were reported by the Czech cybersecurity firm Avast on Monday, which said the 21 malicious apps list here we...
Google Removes 21 Malicious Android Apps from Play Store
Google has stepped in to remove several Android applications from the official Play Store following the disclosure that the apps in question were found to serve intrusive ads. The findings were reported by the Czech cybersecurity firm Avast on Monday, which said the 21 malicious apps list here we...
Is Black Friday a Thing of the Past? Not for Mobile
I recently ordered a new Weber grill from The Home Depot. When it was delivered, I discovered it was the floor model, and it wasn't the perfect grill I had anticipated. I called the local store, and -- long story short -- my friends at The Home Depot gave me a significant discount for not letting...
WordPress Super Store Finder premium plugin <= 6.1 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability found by Eagle Eye in WordPress Super Store Finder premium plugin versions = 6.1. Solution Update the WordPress Super Store Finder premium plugin to the latest available version at least 6.2...
Vulnerability fixed in Windows
Microsoft has fixed a vulnerability in the Windows Codecs Library. Users who had installed the HEVC codec from the Microsoft Store had installed it were vulnerable to the execution of arbitrary code by a remote malicious person. The malicious party to do this must induce the victim to play a rogu...
Microsoft Windows: Service: Microsoft Store Install Service
This service provides support for the Microsoft Store. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...
Imperva’s Mobile Security App
How many apps do you currently have on your mobile device? Is this number a total across both your personal and professional devices? Did you know that between Android’s Google Play Store and Apple’s App Store, there are between 2.2 and 2.8 million apps available to download? Did you know that,...
Researcher uploaded spyware on official Fitbit store
By Sudais Asif The researcher took advantage of the Fitbit gallery which allows developers to submit apps that enhance the functionality of the core app. This is a post from HackRead.com Read the original post: Researcher uploaded spyware on official Fitbit store...