Threat Intel Center

🚨 NEW: CVE-2020-27524 🚨 On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format string specifiers in a device name. This may lead to m... (click for more) Severity: HIGH youtube.com/watch?v=BQUVgAdh…

🚨 NEW: CVE-2016-9274 🚨 Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected. Severity: HIGH youtube.com/watch?v=S7jOLv0s…

🚨 NEW: CVE-2020-15912 🚨 ** DISPUTED ** Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to miti... (click for more) Severity: MEDIUM youtube.com/watch?v=kQWg-Ywv…

🚨 NEW: CVE-2020-15912 🚨 ** DISPUTED ** Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to miti... (click for more) Severity: MEDIUM youtube.com/watch?v=kQWg-Ywv…

🚨 NEW: CVE-2020-15912 🚨 ** DISPUTED ** Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to miti... (click for more) youtube.com/watch?v=kQWg-Ywv…

🚨 NEW: CVE-2020-13788 🚨 Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet. Severity: MEDIUM youtube.com/watch?v=v8Isqy4y…

🚨 NEW: CVE-2020-13788 🚨 Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet. youtube.com/watch?v=v8Isqy4y…

🚨 NEW: CVE-2020-13788 🚨 Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet. youtube.com/watch?v=v8Isqy4y…

🚨 NEW: CVE-2020-15311 🚨 Stash 1.0.3 allows SQL Injection via the downloadmp3.php download parameter. Severity: CRITICAL youtube.com/watch?v=mm4bfsZd…

🚨 NEW: CVE-2020-15311 🚨 Stash 1.0.3 allows SQL Injection via the downloadmp3.php download parameter. Severity: CRITICAL youtube.com/watch?v=mm4bfsZd…

🚨 NEW: CVE-2020-15311 🚨 Stash 1.0.3 allows SQL Injection via the downloadmp3.php download parameter. youtube.com/watch?v=mm4bfsZd…

🚨 NEW: CVE-2020-14157 🚨 The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easi... (click for more) Severity: HIGH youtube.com/watch?v=kCqAVYya…

🚨 NEW: CVE-2020-14157 🚨 The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easi... (click for more) youtube.com/watch?v=kCqAVYya…

🚨 NEW: CVE-2020-14157 🚨 The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easi... (click for more) youtube.com/watch?v=kCqAVYya…

🚨 NEW: CVE-2020-14157 🚨 The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easi... (click for more) youtube.com/watch?v=kCqAVYya…

🚨 NEW: CVE-2020-9013 🚨 Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code. Severity: MEDIUM youtube.com/watch?v=Ok1UmRFW…

🚨 NEW: CVE-2020-13246 🚨 An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another. Severity: HIGH youtube.com/watch?v=DmVgADSV…