ATENTION‼ New - CVE-2018-10093
📖 Read
via "National Vulnerability Database".
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-10091
📖 Read
via "National Vulnerability Database".
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-2659
📖 Read
via "National Vulnerability Database".
It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-1713
📖 Read
via "National Vulnerability Database".
IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-16232
📖 Read
via "National Vulnerability Database".
** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-16231
📖 Read
via "National Vulnerability Database".
** DISPUTED ** In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-9166
📖 Read
via "National Vulnerability Database".
NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-5819
📖 Read
via "National Vulnerability Database".
Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user?s browser within the trust relationship between their browser and the server.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-5800
📖 Read
via "National Vulnerability Database".
A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.📖 Read
via "National Vulnerability Database".
🕴 Microsoft Brings Defender Security Tools to Mac 🕴
📖 Read
via "Dark Reading: ".
Windows Defender becomes Microsoft Defender, and it's available in limited preview for Mac users.📖 Read
via "Dark Reading: ".
Dark Reading
Cybersecurity Analytics recent news | Dark Reading
Explore the latest news and expert commentary on Cybersecurity Analytics, brought to you by the editors of Dark Reading
🕴 Police Federation of England and Wales Suffers Apparent Ransomware Attack 🕴
📖 Read
via "Dark Reading: ".
National Cyber Security Centre and National Crime Agency investigate random attack that locked down the association's data and deleted backups.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
🔏 What CISOs Should Be Aware Of (But Typically Aren't) 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The life of a CISO is a busy one and it can be easy for priorities to get lost in the shuffle. We've polled a group of CISOs and other security professionals to find out what CISOs should be aware of but likely aren't.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
What CISOs Should Be Aware Of (But Typically Aren't)
The life of a CISO is a busy one and it can be easy for priorities to get lost in the shuffle. We've polled a group of CISOs and other security professionals to find out what CISOs should be aware of but likely aren't.
❌ Hackers Take Down Safari, VMware and Oracle at Pwn2Own ❌
📖 Read
via "Threatpost".
On the first day of Pwn2Own 2019 hackers poked holes in Apple Safari, VMware Workstation and Oracle VirtualBox.📖 Read
via "Threatpost".
Threat Post
Hackers Take Down Safari, VMware and Oracle at Pwn2Own
On the first day of Pwn2Own 2019 hackers poked holes in Apple Safari, VMware Workstation and Oracle VirtualBox.
ATENTION‼ New - CVE-2018-14745
📖 Read
via "National Vulnerability Database".
Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is SVE-2018-12029.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14724
📖 Read
via "National Vulnerability Database".
In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14575
📖 Read
via "National Vulnerability Database".
Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14486
📖 Read
via "National Vulnerability Database".
DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-13104
📖 Read
via "National Vulnerability Database".
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-13103
📖 Read
via "National Vulnerability Database".
OX App Suite 7.8.4 and earlier allows SSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12638
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12572
📖 Read
via "National Vulnerability Database".
Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.📖 Read
via "National Vulnerability Database".