CVE-2019-8554

A permissions issue existed in the handling of motion and orientation data. This issue was addressed with improved restrictions. This issue is fixed in iOS 12.2. A website may be able to access sensor information without user consent...

CVE-2019-8554

A permissions issue existed in the handling of motion and orientation data. This issue was addressed with improved restrictions. This issue is fixed in iOS 12.2. A website may be able to access sensor information without user consent...

Code injection

A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able to access the microphone without the microphone use indicator being shown...

CVE-2019-8698

CVE-2019-8698 affects Apple Profiles component entitlement verification. A validation issue could allow a malicious app to restrict access to websites. Apple fixed the issue in iOS 12.4 and tvOS 12.4; remediation is updating to these versions. The surrounding Apple security documentation explicit...

CVE-2019-19033

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...

CVE-2019-19033

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...

Exploit for SQL Injection in Phpipam

CVE-2019-166...

Apple iOS and Apple tvOS Profiles Component Authorization Validation Vulnerability

Apple iOS and Apple tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. profiles is one of the profile components. A security vulnerability exists in the Profiles component of Apple iOS before 12.4 an...

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. An input validation error vulnerability...

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-14273)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. An input validation error vulnerability...

Code Execution Vulnerability in Hina Enterprise Website Management System V2.1

Haina Enterprise Website Management System is a website program developed for small and medium-sized enterprise websites. A code execution vulnerability exists in Haina Enterprise Website Management System V2.1. An attacker can exploit this vulnerability to gain access to the website...

Window Admin Center suffers from a privilege control vulnerability

Windows Admin Center is the new browser-based management server tool for Windows Server deployments. A privilege control vulnerability exists in Window Admin Center, which can be exploited by an attacker to gain access to sensitive information on a website...

Kaspersky: Kaspersky Password Manager allows websites to access user's address data

Note: According to https://www.securityweek.com/kaspersky-adds-password-manager-bug-bounty-program and some other sources, Kaspersky Password Manager is in scope for this program. The program description doesn't reflect this however. Summary It is possible for websites to read out addresses that...

Qutebrowser CSRF Vulnerability

qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access qute:// URLs. A malicious website could exploit this to load a qute://settings/set URL, which then sets editor.command to a bash script, resulting in arbitrary code execution...

Warning – 3 Popular VPN Services Are Leaking Your IP Address

Researchers found critical vulnerabilities in three popular VPN services that could leak users' real IP addresses and other sensitive data. VPN, or Virtual Private Network, is a great way to protect your daily online activities that work by encrypting your data and boosting security, as well as...

Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

UPDATE Grammarly has fixed a bug with its Chrome browser extension that exposed its authorization tokens to websites, allowing sites to assume the identity of a user and view their account’s documents. “I’m calling this a high severity bug, because it seems like a pretty severe violation of user...

Update Rollup 8 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 8 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. It also contains the installation instructions for...

The following error occurred during an authentication attempt for user:domain.com\abc with realm: <unknown>

Getting error "Cannot complete your request" when accessing the website through Netscaler Gateway. Bypassing the Netscaler Gateway website works fine. Event ID:2 "The following error occurred during an authentication attempt for user:domain.com\abc with realm: "...

I'm Warning You, Don't Read this Article. It's a Federal Crime!

Yes, you heard it right. If I tell you not to visit my website, but you still visit it knowing you are disapproved, you are committing a federal crime, and I have the authority to sue you. Wait! I haven't disapproved you yet. Rather I'm making you aware of a new court decision that may trouble yo...

Unauthorized Access Vulnerability in Konica Minolta Printers

Develop ineo+ 220,bizhub 283,Develop ineo 363,bizhub C220,bizhub C353 are some of the printers of Konica Minolta Group. An unauthorized access vulnerability exists in Konica Minolta printers. An attacker could exploit the vulnerability to gain unauthorized access to a website to obtain sensitive...