How 30 Lines of Code Blew Up a 27-Ton Generator

A secret experiment in 2007 proved that hackers could devastate power grid equipment beyond repair—with a file no bigger than a gif...

Greg Rattray Invented the Term Advanced Persistent Threat

I was so pleased to read this Tweet yesterday from Greg Rattray: "Back in 2007, I coined the term “Advanced Persistent Threat” to characterize emerging adversaries that we needed to work with the defense industrial base to deal with... Since then both the APT term and the nature of our adversarie...

CVE-2007-5633

creationtimestamp| type| source ---|---|--- 2020-10-09 13:37:39+00:00| seen| MISP/bef4e3e4-5a14-48c3-a298-4e689b8a77e3 2020-10-09 16:28:13+00:00| seen| MISP/a24f5ae5-13ba-4817-bb12-68d666f181cd...

Microsoft Exchange 2010 End of Support and Overall Patching Study

Today's topic is Exchange 2010, which reaches end of support EoS on Oct. 13, 2020, as well as a survey of other versions of Exchange and how well they are being kept up-to-date. During our work with Project Sonar, we consistently see the use of old and EoS software on the internet. This is...

Solaris 10 (sparc) : 119783-45

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...

Palo Alto Networks PAN-OS 7.1.x < 8.1.14 / 8.0.x < 8.1.14 / 8.1.x < 8.1.14 / 9.0.x < 9.0.7 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.14 or 8.0.x prior to 8.1.14 or 8.1.x prior to 8.1.14 or 9.0.x prior to 9.0.7. It is, therefore, affected by a vulnerability. - An OS command injection vulnerability in the management server component of PAN-...

CVE-2020-2007

An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitrary commands with root privileges. This issue affects: All PAN-OS 7.1 versions; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than...

CVE-2020-2007 PAN-OS: OS command injection in management server

An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitrary commands with root privileges. This issue affects: All PAN-OS 7.1 versions; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than...

CVE-2020-2007

CVE-2020-2007 is an OS command injection vulnerability in PAN-OS management server. An authenticated user can potentially execute arbitrary commands with root privileges. Affected: PAN-OS 7.1 (all 7.1.x), PAN-OS 8.1.x before 8.1.14, and PAN-OS 9.0.x before 9.0.7. No additional exploit details or ...

Description of the 2007 Office Servers SP3 and of the 2007 Office Servers Language Pack SP3

Describes the improvements that the 2007 Office Servers SP3 and the 2007 Office Servers Language Pack SP3 provide and the issues that they fix.IntroductionThe 2007 Microsoft Office servers Service Pack 3 SP3 and the 2007 Microsoft Office servers Language Pack SP3 provide the latest updates to the...

Description of Office Compatibility Pack Service Pack 2

Describes Office Compatibility Pack Service Pack 2 SP2.INTRODUCTIONMicrosoft Office Compatibility Pack Service Pack 2 SP2 gives customers the latest updates to the Office Compatibility Pack for the Microsoft Office Word 2007 file format, for the Microsoft Office Excel 2007 file format, and for th...

Description of the cumulative update package for Office Communications Server 2007 R2, Communicator Web Access: September 2011

Describes the cumulative update for Office Communications Server 2007 R2, Communicator Web Access update package that is dated September 2011.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Microsoft Office Communicator Web Access that is...

Description of the update package for Communications Server 2007 R2, Web Components: March, 2011

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated March 2011.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...

Description of the cumulative update for Office Communications Server 2007 R2, Conferencing Attendant: November 2010

Describes the bugs that are resolved in the cumulative update for Office Communications Server 2007 R2, Conferencing Attendant: November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Conferencing Attendant issues that are fixed in the Office Communications...

Description of the cumulative update for Office Communications Server 2007 R2, Mediation Server: November 2010

Describes the Office Communications Server 2007 R2, Mediation Server issue that is fixed in the Office Communications Server 2007 R2, Mediation Server update package that is dated November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Mediation Server issu...

Description of the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit: April 2010

Describes the issues that are fixed in the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit: April 2010.SummaryThis article describes the Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist...

Description of the update for Communicator 2007 R2: July 2009

Describes the update for Communicator 2007 R2 that is dated July 2009.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated June 2009.This article describes the following items about the update:The issues...

July 8, 2014 update for SharePoint Server 2010 (KB2883004)

July 8, 2014 update for SharePoint Server 2010 KB2883004 This article describes update 2883004 for Microsoft SharePoint Server 2010 that was released on July 8, 2014. This update provides the latest fixes for SharePoint Server 2010. This update improves the round-trip behaviors of modern shapes...

Solaris 10 (sparc) : 125279-09

CDE 1.6: dtsession patch. Date this patch was last updated by Sun : Apr/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid135435; scriptversion"1.5";...

MS15-022: Description of the security update for Microsoft Excel 2007 Service Pack 3: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or previ...