EU Struggles to Determine Growing Cost of Cyberattacks

After painstakingly calculating the true cost of cybercrime in the European Union researchers conclude it’s nearly impossible to come up with hard numbers. In a study released this week by the European Union Agency For Network And Information Security ENISA researchers assert that it’s vitally...

How to Configure Active/Active GSLB for XenDesktop

We often encounter customers with business continuity goals which require XenDesktop user VMs to be available to users in the event of a full site failure. A passive disaster recovery failover configuration is often not desirable because customers want to be able to leverage their hardware...

The vulnerability of the Mac OS X operating system allows a hacker to circumvent the restrictions imposed on telephone calls.

The vulnerability of the Telephony component in the Mac OS X operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to circumvent the restrictions imposed on telephone calls when the Continuity feature is enabled...

Security feature bypass

The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors...

CVE-2015-3785

The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors...

CVE-2015-3785

The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors...

CVE-2015-3785

Technical details about CVE-2015-3785 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories; existing entries only describe a local bypass in OS X Telephony without specifics.

PT-2015-2248

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.11 Description The issue is related to errors in the code of the Telephony component in Mac OS X. It can be exploited by a local attacker to bypass restrictions on telephone calls when the Continuity feature is...

CVE-2015-3785: Undefined Security Weakness

The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors...

Government Report Critical of FAA Security Controls

The Federal Aviation Administration has been put on notice that its information security controls are not up to par and that a risk-based program must be implemented from the ground up in order to assure the safety of its networks and passengers in the sky. A scathing Government Accounting Office...

CVE-2014-3446

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

Sql injection

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

CVE-2014-3446

CVE-2014-3446 describes an unauthenticated SQL injection in BSS Continuity CMS 4.2.22640.0, specifically in wcm/system/pages/admin/getnode.aspx via the nodeid parameter. The vulnerability arises from lack of input sanitization when constructing an SQL query to retrieve node information, allowing ...

CVE-2014-3446

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

PT-2014-5329

Name of the Vulnerable Software and Affected Versions BSS Continuity CMS version 4.2.22640.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the nodeid parameter in the "wcm/system/pages/admin/getnode.aspx" API endpoint...

CVE-2014-3446: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

CVE-2014-3446 - Unauthenticated Blind SQL Injection in BSS Continuity CMS

Vulnerability title: Unauthenticated Blind SQL Injection in BSS Continuity CMS CVE: CVE-2014-3446 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: he following URL and parameters have been confirmed to suffer from Blind SQL...

CVE-2014-3448 - Remote Code Execution Via Unauthenticated File Upload in BSS Continuity CMS

Vulnerability title: Remote Code Execution Via Unauthenticated File Upload in BSS Continuity CMS CVE: CVE-2014-3448 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: The ASPX executable which is responsible for handling file...

CVE-2014-3447 - Remote Denial Of Service in BSS Continuity CMS

Vulnerability title: Remote Denial Of Service in BSS Continuity CMS CVE: CVE-2014-3447 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: By repeatedly calling node enumeration script, a remote unauthenticated attacker can...

BSS Continuity CMS 4.2.22640.0 Code Execution

Vulnerability title: Remote Code Execution Via Unauthenticated File Upload in BSS Continuity CMS CVE: CVE-2014-3448 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: The ASPX executable which is responsible for handling file...