Tool for free Applescript-based malware detection launched.
#Malwares
MORE DETAILS - https://undercodenews.com/tool-for-free-applescript-based-malware-detection-launched/14/01/2021/
#Malwares
MORE DETAILS - https://undercodenews.com/tool-for-free-applescript-based-malware-detection-launched/14/01/2021/
Google, "Through four zero-day vulnerabilities, someone attacks Windows and Android"
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/google-through-four-zero-day-vulnerabilities-someone-attacks-windows-and-android/14/01/2021/
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/google-through-four-zero-day-vulnerabilities-someone-attacks-windows-and-android/14/01/2021/
🔵Espressif ESP-IDF buffer error vulnerability:
https://dailycve.com/espressif-esp-idf-buffer-error-vulnerability
https://dailycve.com/espressif-esp-idf-buffer-error-vulnerability
Dailycve
Espressif ESP-IDF buffer error vulnerability | CVE
Details:
Espressif ESP-IDF is a development platform developed by Espressif for the Internet of Things. There is a buffer error flaw in Espressif ESP-IDF, which can be abused by attackers to crash applications. The following products and versions are…
Sberbank created the Zoom "killer"
#International
MORE DETAILS - https://undercodenews.com/sberbank-created-the-zoom-killer/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/sberbank-created-the-zoom-killer/14/01/2021/
A new and near-final version of Windows 10X has been leaked.
#Updates
MORE DETAILS - https://undercodenews.com/a-new-and-near-final-version-of-windows-10x-has-been-leaked/14/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/a-new-and-near-final-version-of-windows-10x-has-been-leaked/14/01/2021/
🔵A dll hijacking vulnerability exists in Odd Games Accelerator (Windows client):
https://dailycve.com/dll-hijacking-vulnerability-exists-odd-games-accelerator-windows-client
https://dailycve.com/dll-hijacking-vulnerability-exists-odd-games-accelerator-windows-client
Dailycve
A dll hijacking vulnerability exists in Odd Games Accelerator (Windows client) | CVE
Details:
Qiyou E-sports Accelerator is an e-sports-level online competitive gaming accelerator.
There is a DLL hijacking flaw in the Unusual Games E-sports accelerator (Windows client). Attackers are able to run malicious code exploiting this loophole.…
🔵Zhejiang Lande Network Technology Co., Ltd. O2OA system has logic flaws and vulnerabilities:
https://dailycve.com/zhejiang-lande-network-technology-co-ltd-o2oa-system-has-logic-flaws-and-vulnerabilities
https://dailycve.com/zhejiang-lande-network-technology-co-ltd-o2oa-system-has-logic-flaws-and-vulnerabilities
Dailycve
Zhejiang Lande Network Technology Co., Ltd. O2OA system has logic flaws and vulnerabilities | CVE
Details:
Zhejiang Lande Network Technology Co., Ltd.'s business scope covers: computer applications, network technology and product creation, professional services, incorporation of computer systems, and technical services for intelligent building…
The CEO of Parler says its service may never be online again.
#International
MORE DETAILS - https://undercodenews.com/the-ceo-of-parler-says-its-service-may-never-be-online-again/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/the-ceo-of-parler-says-its-service-may-never-be-online-again/14/01/2021/
CEO of Twitter: Trump's ban is the right decision, but it sets a troubling precedent.
#International
MORE DETAILS - https://undercodenews.com/ceo-of-twitter-trumps-ban-is-the-right-decision-but-it-sets-a-troubling-precedent/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/ceo-of-twitter-trumps-ban-is-the-right-decision-but-it-sets-a-troubling-precedent/14/01/2021/
🔵File upload vulnerability exists in CatfishCMS:
https://dailycve.com/file-upload-vulnerability-exists-catfishcms
https://dailycve.com/file-upload-vulnerability-exists-catfishcms
Dailycve
File upload vulnerability exists in CatfishCMS | CVE
Details:
Catfish CMS is a PHP content management framework which is free and open source.
CatfishCMS has a weakness for file transfer, which can be used to access server access permissions by attackers.
References:
http://www.catfish-cms.com/
🔵Mblog open source Java blog system has logic flaws:
https://dailycve.com/mblog-open-source-java-blog-system-has-logic-flaws
https://dailycve.com/mblog-open-source-java-blog-system-has-logic-flaws
Dailycve
Mblog open source Java blog system has logic flaws | CVE
Details:
Mblog is an open source and free blog system built in the Java language, using spring-boot, jpa, shiro, bootstrap and other common frameworks to support the mysql/h2 database.
The Mblog open source Java blog framework has a weakness with a…
🔵Vientiane webmaster 2008 enhanced version has dll hijacking vulnerability:
https://dailycve.com/vientiane-webmaster-2008-enhanced-version-has-dll-hijacking-vulnerability
https://dailycve.com/vientiane-webmaster-2008-enhanced-version-has-dll-hijacking-vulnerability
Dailycve
Vientiane webmaster 2008 enhanced version has dll hijacking vulnerability | CVE
Details:
Vientiane Site Management is a management platform suitable for Internet cafe owners developed by Vientiane.
There is a DLL hijacking flaw in the improved version of Vientiane Network Management 2008. This vulnerability can be used by attackers…
🔵PDF cat split and merge software has dll hijacking vulnerability:
https://dailycve.com/pdf-cat-split-and-merge-software-has-dll-hijacking-vulnerability
https://dailycve.com/pdf-cat-split-and-merge-software-has-dll-hijacking-vulnerability
Dailycve
PDF cat split and merge software has dll hijacking vulnerability | CVE
Details:
PDF cat split and merge software is a software that merges PDF files.
A dll hijacking vulnerability is available for the PDF cat break and merge applications. This vulnerability can be exploited by attackers to load the dll without signature…
BlackBerry sold 90 primary patents to Huawei for smartphones.
#International
MORE DETAILS - https://undercodenews.com/blackberry-sold-90-primary-patents-to-huawei-for-smartphones/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/blackberry-sold-90-primary-patents-to-huawei-for-smartphones/14/01/2021/
The $2.1 billion purchase of Fitbit by Google is eventually complete: set sail again.
#International
MORE DETAILS - https://undercodenews.com/the-2-1-billion-purchase-of-fitbit-by-google-is-eventually-complete-set-sail-again/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/the-2-1-billion-purchase-of-fitbit-by-google-is-eventually-complete-set-sail-again/14/01/2021/
A alert will show on iPhones that use non-original cameras, beginning with iOS 14.4.
#Updates
MORE DETAILS - https://undercodenews.com/a-alert-will-show-on-iphones-that-use-non-original-cameras-beginning-with-ios-14-4/14/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/a-alert-will-show-on-iphones-that-use-non-original-cameras-beginning-with-ios-14-4/14/01/2021/
The macOS beta edition of Apple started abandoning its own components to circumvent the whitelist of the firewall by default.
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/the-macos-beta-edition-of-apple-started-abandoning-its-own-components-to-circumvent-the-whitelist-of-the-firewall-by-default/14/01/2021/
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/the-macos-beta-edition-of-apple-started-abandoning-its-own-components-to-circumvent-the-whitelist-of-the-firewall-by-default/14/01/2021/
🔵Vulnerabilities in input validation errors in many Cisco products:
https://dailycve.com/vulnerabilities-input-validation-errors-many-cisco-products
https://dailycve.com/vulnerabilities-input-validation-errors-many-cisco-products
Dailycve
Vulnerabilities in input validation errors in many Cisco products | CVE
Details:
The Cisco RV110W, etc. is all a US Cisco router (Cisco). There is an input validation error limitation in Cisco Small Business Routers, which derives from inadequate input validation in the site management gui. This vulnerability can be used…