251 matches found
CVE-2021-46086
xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...
CVE-2021-46086
xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...
PT-2022-12561
Name of the Vulnerable Software and Affected Versions xzs-mysql versions t3.4.0 and later Description The issue concerns an insecure permissions vulnerability in the functional method of submitting examination papers in an online examination system. An attacker can exploit this by modifying...
CVE-2021-46086: Incorrect Default Permissions
xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...
CVE-2021-31850
A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...
CVE-2021-31850
A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...
Denial of service
A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...
CVE-2021-31850 Denial of Service in Database Security on Windows
A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...
CVE-2021-31850: Files or Directories Accessible to External Parties
A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...
PT-2021-19549
Name of the Vulnerable Software and Affected Versions: Database Security versions prior to 4.8.4 Description: A denial-of-service issue allows a remote authenticated administrator to trigger a denial-of-service attack against the Database Security server. The configuration of Archiving through th...
CVE-2021-38882: Undefined Security Weakness
IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. IBM X-Force ID: 209164...
New Disk Wiping Malware Targets Israel
Apostle seems to be a new strain of malware that destroys data. In a post published Tuesday, SentinelOne researchers said they assessed with high confidence that based on the code and the servers Apostle reported to, the malware was being used by a newly discovered group with ties to the Iranian...
What role does data destruction play in cybersecurity?
When organization leaders think about cybersecurity, it's usually about which tools and practices they need to add to their stack—email protection, firewalls, network and endpoint security, employee awareness training, AI and machine-learning technology—you get the idea. What's not often consider...
Why DevOps is Becoming More Like DevSecOps
Editor's Note: Sam Bocetta, a guest author on the Carbon Black blog, is a freelance journalist specializing in U.S. diplomacy and national security, with emphases on technology trends in cyber warfare, cyber defense, and cryptography. In the year 2000, a Time magazine essay authored by Steward...
Hackers Destroyed VFEmail Service – Deleted Its Entire Data and Backups
What could be more frightening than a service informing you that all your data is gone—every file and every backup servers are entirely wiped out? The worst nightmare of its kind. Right? But that's precisely what just happened this week with VFEmail.net, a US-based secure email provider that lost...
New Shamoon Variant
A new variant of the Shamoon malware has destroyed significant amounts of data at a UAE "heavy engineering company" and the Italian oil and gas contractor Saipem. Shamoon is the Iranian malware that was targeted against the Saudi Arabian oil company, Saudi Aramco, in 2012 and 2016. We have no ide...
XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
Researchers have discovered a new sophisticated malware family in the wild, which wrecks havoc on Windows and Linux systems with a combination of data destructive ransomware and malicious cryptomining. The malware, dubbed by Palo Alto Networks’ Unit 42 researchers who discovered it as Xbash, has...
CVE-2017-6404: Incorrect Default Permissions
An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data...
PT-2016-6313
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.98 on macOS Google Chrome versions prior to 54.0.2840.99 on Windows Google Chrome versions prior to 54.0.2840.100 on Linux Opera affected versions not specified Description The issue arises from a...
【Warning Notice】IOS remote jailbreak APT attack security a threat-vulnerability warning-the black bar safety net
! IOS remote jailbreak APT attacks Apple yesterday for IOS released a security update that relates to three 0 day vulnerability, this vulnerability discovery process from the primary APT attack begins. We need to note that, the hacker through the loopholes for remote control and get for IOS users...