New plugin to balance imbalances in privacy between firms and customers.
#Updates
MORE DETAILS - https://undercodenews.com/new-plugin-to-balance-imbalances-in-privacy-between-firms-and-customers/16/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/new-plugin-to-balance-imbalances-in-privacy-between-firms-and-customers/16/01/2021/
🔵SongCMS has command execution vulnerability:
https://dailycve.com/songcms-has-command-execution-vulnerability
https://dailycve.com/songcms-has-command-execution-vulnerability
Dailycve
SongCMS has command execution vulnerability | CVE
Details:
SongCMS is a PHP+MySQL and ASP+Access/SQL Server based CMS built for businesses and supports free and open source multi-language CMS to enable business users create and deploy enterprise-level portals easily.
SongCMS has a flaw in the execution…
🔵Unpatched Sixnet switch SLX-18MG has a denial of service
vulnerability
https://dailycve.com/unpatched-sixnet-switch-slx-18mg-has-denial-service-vulnerability
vulnerability
https://dailycve.com/unpatched-sixnet-switch-slx-18mg-has-denial-service-vulnerability
Dailycve
Unpatched Sixnet switch SLX-18MG has a denial of service vulnerability | CVE
Details:
Sixnet has more than 30 years of product design and engineering expertise in industrial automation, thoroughly understands the technology criteria of various industrial occasions, and injects into industrial Ethernet switch products its advanced…
WhatsApp damage telegram arrived, and fraud was infested with 'privacy invasion'
#Updates
MORE DETAILS - https://undercodenews.com/whatsapp-damage-telegram-arrived-and-fraud-was-infested-with-privacy-invasion/16/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/whatsapp-damage-telegram-arrived-and-fraud-was-infested-with-privacy-invasion/16/01/2021/
Zero-day, which actually destroys hard drives of type NTFS.
#Malwares
MORE DETAILS - https://undercodenews.com/zero-day-which-actually-destroys-hard-drives-of-type-ntfs/16/01/2021/
#Malwares
MORE DETAILS - https://undercodenews.com/zero-day-which-actually-destroys-hard-drives-of-type-ntfs/16/01/2021/
🔵Unpatched File upload vulnerability exists in YoudianCMS:
https://dailycve.com/unpatched-file-upload-vulnerability-exists-youdiancms
https://dailycve.com/unpatched-file-upload-vulnerability-exists-youdiancms
Dailycve
Unpatched File upload vulnerability exists in YoudianCMS | CVE
Details:
A device page, a smartphone website, WeChat, APP, and a small software are combined with YouDianCMS. It shares space and synchronizes data automatically. It is an ideal option for five domestic open source sites to be incorporated.
YoudianCMS…
🔵Unpatched Connex serial server C2000-B2-SFE0101-BB1 has storage XSS vulnerabilities:
https://dailycve.com/unpatched-connex-serial-server-c2000-b2-sfe0101-bb1-has-storage-xss-vulnerabilities
https://dailycve.com/unpatched-connex-serial-server-c2000-b2-sfe0101-bb1-has-storage-xss-vulnerabilities
Dailycve
Unpatched Connex serial server C2000-B2-SFE0101-BB1 has storage XSS vulnerabilities | CVE
Details:
Serial server C2000-B2-SFE0101-BB1 offers serial port to network features that can convert serial port RS-232 to network interface TCP/IP protocols.
The Cognex C2000-B2-SFE0101-BB1 serial server has an XSS storage flaw, which can be abused…
The 20th Anniversary of Wikipedia, 6 Open Source Security Resources.
#Updates
MORE DETAILS - https://undercodenews.com/the-20th-anniversary-of-wikipedia-6-open-source-security-resources/16/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/the-20th-anniversary-of-wikipedia-6-open-source-security-resources/16/01/2021/
Re-announced free trial period for Apple TV+ extended to July 2011.
#Updates #Technologies
MORE DETAILS - https://undercodenews.com/re-announced-free-trial-period-for-apple-tv-extended-to-july-2011/16/01/2021/
#Updates #Technologies
MORE DETAILS - https://undercodenews.com/re-announced-free-trial-period-for-apple-tv-extended-to-july-2011/16/01/2021/
🔵WPS office has a denial of service vulnerability:
https://dailycve.com/wps-office-has-denial-service-vulnerability
https://dailycve.com/wps-office-has-denial-service-vulnerability
Dailycve
WPS office has a denial of service vulnerability | CVE
Details:
WPS office is a Kingsoft released office app.
The WPS office has a service denial flaw that can be used by attackers to carry out service denial attacks.
Affected Versions:
WPS Office v11.1.0.10214
The Fix:
Wait for new release from:…
🔵Unpatched Jiajia 3GP format converter has dll hijacking vulnerability:
https://dailycve.com/unpatched-jiajia-3gp-format-converter-has-dll-hijacking-vulnerability
https://dailycve.com/unpatched-jiajia-3gp-format-converter-has-dll-hijacking-vulnerability
Dailycve
Unpatched Jiajia 3GP format converter has dll hijacking vulnerability | CVE
Details:
A professional and easy-to-operate 3GP handheld video format converter is the Jiajia 3GP format converter. Various common video formats (3GP, 3G2, 3GPP, MP4, AVI) can be converted easily by the Jiajia 3GP format converter.
The Jiajia 3GP format…
For clients to exert more power over their voice data, Microsoft offers new setting options.
#Updates
MORE DETAILS - https://undercodenews.com/for-clients-to-exert-more-power-over-their-voice-data-microsoft-offers-new-setting-options/16/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/for-clients-to-exert-more-power-over-their-voice-data-microsoft-offers-new-setting-options/16/01/2021/
Samsung Launches Earphone Protective Case Anycall Nostalgic Limited Edition.
#Technologies
MORE DETAILS - https://undercodenews.com/samsung-launches-earphone-protective-case-anycall-nostalgic-limited-edition/16/01/2021/
#Technologies
MORE DETAILS - https://undercodenews.com/samsung-launches-earphone-protective-case-anycall-nostalgic-limited-edition/16/01/2021/
🔵Unpatched UCMS system has code execution vulnerability:
https://dailycve.com/unpatched-ucms-system-has-code-execution-vulnerability
https://dailycve.com/unpatched-ucms-system-has-code-execution-vulnerability
Dailycve
Unpatched UCMS system has code execution vulnerability | CVE
Details:
UCMS is a framework for handling content written in the PHP language.
In the UCMS method, a code execution flaw occurs, which can be abused to execute malicious code by attackers.
Affected Version:
UCMS UCMS 1.5
The Fix:
Wait for…
🔵Foxmail (Windows client) has dll hijacking vulnerability:
https://dailycve.com/foxmail-windows-client-has-dll-hijacking-vulnerability
https://dailycve.com/foxmail-windows-client-has-dll-hijacking-vulnerability
Dailycve
Foxmail (Windows client) has dll hijacking vulnerability | CVE
Details:
Foxmail is a domestic e-mail client program that offers Internet standards-based functionality such as e-mail sending and receiving, digital signature and encryption, local mailbox mail search and anti-spam.
Foxmail (Windows Client) is vulnerable…
The first digital bank in Japan, everybody's bank opening in May, the "insane" of finance.
#International
MORE DETAILS - https://undercodenews.com/the-first-digital-bank-in-japan-everybodys-bank-opening-in-may-the-insane-of-finance/16/01/2021/
#International
MORE DETAILS - https://undercodenews.com/the-first-digital-bank-in-japan-everybodys-bank-opening-in-may-the-insane-of-finance/16/01/2021/
WINDTRE: scam that deprived the company of 21 million euros.
#CyberAttacks
MORE DETAILS - https://undercodenews.com/windtre-scam-that-deprived-the-company-of-21-million-euros/16/01/2021/
#CyberAttacks
MORE DETAILS - https://undercodenews.com/windtre-scam-that-deprived-the-company-of-21-million-euros/16/01/2021/
🔵Prestashop'id_product' SQL injection vulnerability (DC: 195-2021)
https://dailycve.com/prestashopidproduct-sql-injection-vulnerability
https://dailycve.com/prestashopidproduct-sql-injection-vulnerability
Dailycve
Prestashop'id_product' SQL injection vulnerability | CVE
Details:
PrestaShop is a free open source e-commerce solution, fully featured and cross-platform, built for web2.0.0.
SQL injection vulnerability of Prestashop'id product '. Vulnerabilities may be exploited by attackers to access personal information…
🔵Combodo iTop cross-site scripting vulnerability (DC- 194-2021):
https://dailycve.com/combodo-itop-cross-site-scripting-vulnerability
https://dailycve.com/combodo-itop-cross-site-scripting-vulnerability
Dailycve
Combodo iTop cross-site scripting vulnerability | CVE
Details:
Combodo iTop is free software for hardware, software and associated resources management.
Combodo iTop 2.7.2 and releases previous to 3.0.0 have bugs around cross-site scripting. This vulnerability can be abused by attackers to execute cross…
It's not possible to charge MacBook Pro, netizens collectively fry pot, Apple responds: device issue.
#Bugs
MORE DETAILS - https://undercodenews.com/its-not-possible-to-charge-macbook-pro-netizens-collectively-fry-pot-apple-responds-device-issue/16/01/2021/
#Bugs
MORE DETAILS - https://undercodenews.com/its-not-possible-to-charge-macbook-pro-netizens-collectively-fry-pot-apple-responds-device-issue/16/01/2021/
