9264 matches found
Unveiling Vulnerabilities: Penetration Testing Services
By Owais Sultan Human Mind and Attention as Clue in Penetration Testing Success Stories. This is a post from HackRead.com Read the original post: Unveiling Vulnerabilities: Penetration Testing Services...
IoT Secure Development Guide
Introduction This guide deals with threat modelling and early stages of development so that security issues and controls are identified before committing to manufacturing. Current attack methods, and the pitfalls we find in embedded designs, have been highlighted so that a finished product is as...
The reality of Apple watch pen testing
Introduction We were approached to do an Apple Watch application test. It seems this isnt a service offered by many companies including us, although we’ve done plenty of work on Android Wear before but also, little information exists online about attempts, experiences or if it’s even possible. So...
Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems
Cisco has released updates to address a critical security flaw impacting Emergency Responder that allows unauthenticated, remote attackers to sign into susceptible systems using hard-coded credentials. The vulnerability, tracked as CVE-2023-20101 CVSS score: 9.8, is due to the presence of static...
Sony was attacked by two ransomware operators
On September 25, newcomer ransomware group RansomedVC claimed to have successfully compromised the computer systems of entertainment giant Sony. Then, on October 4, news leaked that Sony had told current and former employees and their family members about another cybersecurity breach that exposed...
javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5840330748198912 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...
IBM: Unauthenticated Remote Access to Testing Endpoint
Unauthenticated remote access to a testing endpoint was reported, analyzed and remediated...
imgsys Component Privilege Escalation
The vulnerability of the imgsys microprogramming system component of MediaTek’s chips is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
imgsys Component Privilege Escalation
The vulnerability of the imgsys microprogramming system component of MediaTek’s chips is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
imgsys Component Privilege Escalation
The vulnerability of the imgsys microprogramming system component of MediaTek’s chips is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-37891
Cross-Site Request Forgery CSRF vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin = 2.0.4 versions...
CVE-2023-37891
Cross-Site Request Forgery CSRF vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin = 2.0.4 versions...
CVE-2023-37891: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin = 2.0.4 versions...
RCE (Remote Code Execution) in Sourcetree for Mac and Sourcetree for Windows
This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...
Qualys Named a Market Leader in GigaOm Radar Report for Application Security Testing
Qualys Web Application Scanning WAS has been named a leader in the GigaOm Radar Report for Application Security Testing, 2023. Web app security is critical for every organization, for attacks on this vector caused 25% of breaches, according to the Verizon 2023 Data Breach Investigations Report. T...
CVE-2023-41878
MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high...
Design/Logic Flaw
MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high...
CVE-2023-41878
MeterSphere’s CVE-2023-41878 describes a vulnerability in the Selenium VNC configuration where a weak default password allows unauthenticated access to VNC and can grant high-level privileges. Affected product: MeterSphere (Selenium VNC config). Root cause: default weak password enabling unauthor...
CVE-2023-41878 Weak password of selenium VNC in MeterSphere
MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high...
