Published Vulnerabilities

Thu

Nov

Adobe Connect v9.5.6 - (CVE-2016-7851) Persistent Cross Site Vulnerability

Submitted by Editorial_Staff_Team on Thu, 11/10/2016 - 10:52

Adobe Connect v9.5.6 - (CVE-2016-7851) Persistent Cross Site Vulnerability

About some month ago the pentester and security researcher Benjamin Kunz Mejri was pentesting for the adobe security department the actual upcoming "Connect" web services and web-application. Due to his active researcher the pentester discovered a persistent cross site scripting vulnerability in the Adobe Connect v9.5.6 software client. The issue was reported in april 2016 to Adobe via PSIRT and resolved in november 2016. The "Adobe Connect" web conferencing software service for windows offers immersive online meeting experiences for collaboration, virtual classrooms and large scale webinars.

Tue

Sep

Critical Vulnerabilities in Sparkassen Bank Server discovered by Researchers

Submitted by Editorial_Staff_Team on Tue, 09/06/2016 - 13:14

Critical Vulnerabilities in the Sparkassen Newsletter, Emails & Paydirect

The core research team of the vulnerability laboratory is helping the german sparkasse to identify new threats of security for the "finance informatik gmbh team" in frankfurt. During the last year we discovered several vulnerabilities in the bank infrastructure, which were silently patched but responsible and safe resolved case. Savings banks in german-speaking countries are called Sparkasse. They do work as commercial banks in a decentralized structure, that is connected on different points. Today we would like to talk about the last resolved security vulnerabilities in the official german sparkasse bank web infrastructure.