Compass Security News

Things went wrong at Facebook & Co at the beginning of October. Ivan Bütler explains the breakdown in an unusal way in the Neue Zürcher Zeitung (NZZ).…

Philipp Moa and Felix Aeppli identified a Padding Oracle vulnerability in the SAML login of ArcGIS.

In the latest issue of «Schweizer Personalvorsorge» you can read why a strong security culture is the very basis of an effective protection against…

Emanuel Duss and Sylvain Heiniger identified multiple vulnerabilities in the OpenVPN status monitor software openvpn-monitor.

Emanuel Duss identified a biometric authentication bypass vulnerability in the Ionic Identity Vault secure storage solution on Android.

Philipp Mao identified a hardcoded credentials vulnerability in the electronic time recording system timeCard

Emanuele Barbeno identified a vulnerability in the open source software NeDi.

Stephan Sekula identified an XSS vulnerability in the report generation tool Canopy.

Alex Joss and Emanuele Barbeno identified vulnerabilities in Intland Software´s Application-Lifecycle-Management codeBeamer.

Tino Kautschke identified an XSS vulnerability in the content management system Plone.

Sylvain Heiniger and Alex Joss identified vulnerabilities in Avaya Equinox® Conferencing, an all-inclusive solution for voice, video and desktop…

Nicolas Heiniger identified a OS Command Injection (RCE) in WorkCentre 78XX Series.