ATENTIONβΌ New - CVE-2016-1000028
π Read
via "National Vulnerability Database".
Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would only potentially impact other admins. (Tenable ID 5198).π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4695
π Read
via "National Vulnerability Database".
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Executionπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4693
π Read
via "National Vulnerability Database".
WordPress Xorbin Digital Flash Clock 1.0 has XSSπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4691
π Read
via "National Vulnerability Database".
Sencha Labs Connect has XSS with connect.methodOverride()π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4665
π Read
via "National Vulnerability Database".
SPBAS Business Automation Software 2012 has CSRF.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4664
π Read
via "National Vulnerability Database".
SPBAS Business Automation Software 2012 has XSS.π Read
via "National Vulnerability Database".
β Christmas malware uses βSupport Greta Thunbergβ as a lure β
π Read
via "Naked Security".
You're invited to a climate demonstration... but to find the time and place, you need to open an attachment. Don't do it!π Read
via "Naked Security".
Naked Security
Christmas malware uses βSupport Greta Thunbergβ as a lure
Youβre invited to a climate demonstrationβ¦ but to find the time and place, you need to open an attachment. Donβt do it!
π Friday Five: 12/27 Edition π
π Read
via "Subscriber Blog RSS Feed ".
A phishing attack targets PayPal customers, two bugs are discovered in the Twitter Android app, and a cyber attack causes flight cancellations in Alaska - catch up on the week's news with the Friday Five.π Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 12/27 Edition
A phishing attack targets PayPal customers, two bugs are discovered in the Twitter Android app, and a cyber attack causes flight cancellations in Alaska - catch up on the week's news with the Friday Five.
ATENTIONβΌ New - CVE-2013-5027
π Read
via "National Vulnerability Database".
Collabtive 1.0 has incorrect access controlπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4985
π Read
via "National Vulnerability Database".
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video streamπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4982
π Read
via "National Vulnerability Database".
AVTECH AVN801 DVR has a security bypass via the administration login captchaπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4976
π Read
via "National Vulnerability Database".
Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentialsπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4975
π Read
via "National Vulnerability Database".
Hikvision DS-2CD7153-E IP Camera has Privilege Escalationπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4868
π Read
via "National Vulnerability Database".
Karotz API 12.07.19.00: Session Token Information Disclosureπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4867
π Read
via "National Vulnerability Database".
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijackingπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4859
π Read
via "National Vulnerability Database".
INSTEON Hub 2242-222 lacks Web and API authenticationπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4796
π Read
via "National Vulnerability Database".
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review requestπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4764
π Read
via "National Vulnerability Database".
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4763
π Read
via "National Vulnerability Database".
Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4743
π Read
via "National Vulnerability Database".
Static HTTP Server 1.0 has a Local Overflowπ Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-4692
π Read
via "National Vulnerability Database".
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSSπ Read
via "National Vulnerability Database".