Instagram Retained Deleted User Data Despite GDPR Rules
The photo-sharing app retained people’s photos and private direct messages on its servers even after users removed them. Continue reading Instagram Retained Deleted User Data Despite GDPR Rules
Category Archives: Flaw
High-Severity TinyMCE Cross-Site Scripting Flaw Fixed
The cross-site scripting flaw could enable arbitrary code execution, information disclosure – and even account takeover. Continue reading High-Severity TinyMCE Cross-Site Scripting Flaw Fixed
Amazon Alexa ‘One-Click’ Attack Can Divulge Personal Data
Researchers disclosed flaws in Amazon Alexa that could allow attackers to access personal data and install skills on Echo devices. Continue reading Amazon Alexa ‘One-Click’ Attack Can Divulge Personal Data
Citrix Warns of Critical Flaws in XenMobile Server
Citrix said that it anticipates malicious actors “will move quickly to exploit” two critical flaws in its mobile device management software. Continue reading Citrix Warns of Critical Flaws in XenMobile Server
Researcher Publishes Bypass for Patch for vBulletin 0-Day Flaw
Three separate proof-of-concepts on Bash, Python and Ruby posted to outsmart fix issued last year to remedy pre-auth RCE bug. Continue reading Researcher Publishes Bypass for Patch for vBulletin 0-Day Flaw
TeamViewer Flaw in Windows App Allows Password-Cracking
Remote, unauthenticated attackers could exploit the TeamViewer flaw to execute code and crack victims’ passwords. Continue reading TeamViewer Flaw in Windows App Allows Password-Cracking
Netgear Won’t Patch 45 Router Models Vulnerable to Serious Flaw
Almost two months after a high-severity flaw was disclosed – and seven months after it was first reported – Netgear has yet to issue fixes for 45 of its router models. Continue reading Netgear Won’t Patch 45 Router Models Vulnerable to Serious Flaw
Microsoft Revamps Windows Insider Preview Bug Bounty Program
Researchers can earn up to $100,000 for finding vulnerabilities in Microsoft’s revamped Windows Insider Preview bug bounty program. Continue reading Microsoft Revamps Windows Insider Preview Bug Bounty Program
Adobe Prompts Users to Uninstall Flash Player As EOL Date Looms
Adobe will prompt Flash Player users to uninstall the application before the Dec. 31, 2020 end of life date hits. Continue reading Adobe Prompts Users to Uninstall Flash Player As EOL Date Looms
Login with Facebook Bug Earns $20K Bounty
The cross-site scripting vulnerability could have allowed trivial account takeover. Continue reading Login with Facebook Bug Earns $20K Bounty