EulerOS 2.0 SP5 : squid (EulerOS-SA-2021-2231)

According to the version of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP...

How to leverage accountability to ensure sustainable enterprise data security

As post-pandemic economic recovery continues to drive rapid acceleration in digital transformation, documented data breaches and service disruptions caused by cybercriminal activity have become an unwelcome part of our daily news feed. In spite of the regulations and compliance requirements that...

PT-2021-6954 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Win32k component of Microsoft Windows, allowing an attacker to potentially elevate their privileges. This could...

PT-2021-6026 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited by a remote attacker to elevate their privileges. Recommendations...

IBM Cloud Pak for Applications 信息泄露漏洞

IBM Cloud Pak for Applications is an application from IBM Corporation. An information disclosure vulnerability exists in IBM Cloud Pak for Applications, which stems from the fact that the system does not effectively restrict access to in-memory data, which could be exploited by an attacker to gai...

Microsoft SharePoint Server 远程代码执行漏洞(CVE-2021-28474)

In May of 2021, Microsoft released a patch to correct CVE-2021-28474, a remote code execution bug in supported versions of Microsoft SharePoint Server. This bug was reported to ZDI by an anonymous researcher and is also known as ZDI-21-574. This blog takes a deeper look at the root cause of this...

QSAN Storage Manager Information Disclosure Vulnerability

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An information disclosure vulnerability exists in QSAN Storage Manager, which stems from not adding effective privilege controls to the Access to System Information feature. The vulnerability can be...

Top 10 Cloud security tips

About half of the pen tests we’re asked to do involved cloud services at some point. We’ve even tested a cloud platform on an aeroplane – the irony was not lost on us! There is a multitude of ways to improve the security of your cloud platforms and often those ways are ever-changing or obscured...

The vulnerability of the Crmsh cluster’s management layer lies in the lack of a mechanism for managing privileges. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Crmsh cluster management interface is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Why You’re Not Making the Leap from Compliance to a Database Security Strategy

Gartner strongly recommends that the concept of “big data strategy” should be replaced with “making big data part of our everyday strategy.” Technology has created a database activity explosion for most enterprises and made traditional agent-based data logging, monitoring, and auditing far too...

SNMP – Simply Not My Problem. Or is it?

TL;DR: Use SNMPv3; long gone is default community strings, hello complex passwords! Remove from the internet, if required, implement a VPN solution to restrict access to only authorised parties. SNMP is a protocol used for the remote management of devices on a network. By remote, we mean access...

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation emulator is related to a lack of mechanism for controlling code generation. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation software is related to the lack of restrictions on instruction size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...

Johnson Controls Facility Explorer 安全漏洞

Johnson Controls Facility Explorer is a monitoring controller from Johnson Controls that provides scalable system-wide monitoring and control. A security vulnerability exists in Johnson Controls Facility Explorer that stems from improper privilege management and can be exploited by an attacker to...

Johnson Controls Facility Explorer

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Facility Explorer Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated user an unintended...

Sensormatic Electronics C-CURE 9000 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Equipment: C-CURE 9000 Vulnerability: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...

Johnson Controls C-CURE 输入验证错误漏洞

Johnson Controls C-CURE is a site server from Johnson Controls, Inc. It is a cost-effective access control solution for small sites requiring up to 64 card readers. An input validation error vulnerability exists in the Johnson Controls C-CURE 9000, which stems from the auto-update feature of the...

Johnson Controls exacqVision Web Service Information Disclosure (JCI-PSA-2021-03)

Binary data exacqVisionwebservicecve-2021-27656.nbin...

Johnson Controls exacqVision Web Service Detection

Binary data exacqVisionwebservicedetect.nbin...

CVE-2021-23275

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfi...

MITRE ATT&CK® mappings released for built-in Azure security controls

The Security Stack Mappings for Azure research project was published today, introducing a library of mappings that link built-in Azure security controls to the MITRE ATT&CK® techniques they mitigate against. Microsoft once again worked with the Center for Threat-Informed Defense and other Center...