πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β™ŸοΈ SMS About Bank Fraud as a Pretext for Voice Phishing β™ŸοΈ

Most of us have probably heard the term "smishing" -- which is a portmanteau for traditional phishing scams sent through SMS text messages. Smishing messages usually include a link to a site that spoofs a popular bank and tries to siphon personal information. But increasingly, phishers are turning to a hybrid form of smishing -- blasting out linkless text messages about suspicious bank transfers as a pretext for immediately calling and scamming anyone who responds via text.

πŸ“– Read

via "Krebs on Security".
πŸ•΄ ChaosDB: Researchers Share Technical Details of Azure Flaw πŸ•΄

Wiz researchers who discovered a severe flaw in the Azure Cosmos DB database discussed the full extent of the vulnerability at Black Hat Europe.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2020-23876 β€Ό

pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23886 β€Ό

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23903 β€Ό

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23891 β€Ό

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23884 β€Ό

A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23873 β€Ό

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23898 β€Ό

A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23896 β€Ό

A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23902 β€Ό

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address may be used as a return value starting at Editor!TMethodImplementationIntercept+0x528a3.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23887 β€Ό

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23900 β€Ό

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address controls Code Flow starting at Editor!TMethodImplementationIntercept+0x57a3b.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23879 β€Ό

pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23888 β€Ό

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted psd file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23901 β€Ό

A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23894 β€Ό

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23899 β€Ό

A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23895 β€Ό

A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23889 β€Ό

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted ico file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-23872 β€Ό

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).

πŸ“– Read

via "National Vulnerability Database".