5496 matches found
U.S. Dept Of Defense: XSS on www.██████ alerts and a number of other pages
Summary: If an action on ███████ results in an error, an error dialog is shown. This dialog, in certain scenarios, is vulnerable to stored XSS due to a lack of sanitization. Description: In this specific example, I'll be using a GET endpoint that attempts to delete alerts based on an ID supplied...
The vulnerability affects the implementation of Security Assertion Markup Language, a mechanism for authentication in software-based secure mobile access solutions from Cisco. This vulnerability allows attackers to bypass the authentication process.
The vulnerability of the Security Assertion Markup Language SAML authentication mechanism for Single Sign-On SSO in Cisco AnyConnect Secure Mobility Client, Cisco Adaptive Security Appliance ASA, and Cisco Firepower Threat Defense FTD is related to improper session management. Exploiting this...
Podcast: Why 'Throwing Money' at Threats Won't Work
Randori CTO David Wolpoff better known as Moose, joins the Threatpost Podcast this week to talk cyber-defense strategies with Threatpost’s Lindsey O’Donnell. With high-profile breaches making headlines every day, and enterprises spending more money on tools and solutions than ever before, Moose...
U.S. Dept Of Defense: SQL Injection in Login Page: https://█████/█████████/login.php
Summary: I believe I've discovered an error based SQL injection in the login page for https://████/██████/login.php. Description: When browsing to the webpage https://█████/██████/login.php and entering certain control characters into the "Username" field, and SQL error Oracle is produced. Impact...
5 New Nonlethal Weapons the Defense Department Is Developing
The US Department of Defense's Joint Non-Lethal Weapons Program is testing a new arsenal powered by lasers, plasma, chemical irritants, and more...
Israeli Surveillance Gear
The Israeli Defense Force mounted a botched raid in Gaza. They were attempting to install surveillance gear, which they ended up leaving behind. There are photos -- scroll past the video. Israeli media is claiming that the capture of this gear by Hamas causes major damage to Israeli electronic...
Synaptics Touchpad Driver Leaks Kernel Memory Pointers - Lenovo Support US
No description provided...
Microsoft Windows Security Bypass and Latest Servicing Stack Updates-Defense in Depth (KB4465660)
This host is missing an important security update according to Microsoft KB4465660. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Windows Security Bypass and Latest Servicing Stack Updates- Defense in Depth (KB4465661)
This host is missing an important security update according to Microsoft KB4465661. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Windows Security Bypass and Latest Servicing Stack Updates-Defense in Depth (KB4465663)
This host is missing an important security update according to Microsoft KB4465663. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Windows Security Bypass and Latest Servicing Stack Updates-Defense in Depth (KB4465664)
This host is missing an important security update according to Microsoft KB4465664. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Windows Latest Servicing Stack Updates-Defense in Depth (KB3177467)
This host is missing an important security update according to Microsoft KB3177467. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Windows Security Bypass and Latest Servicing Stack Updates-Defense in Depth (KB4465659)
This host is missing an important security update according to Microsoft KB4465659. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Cb Customer Spotlight Series: Q&A with Integral’s Sean McFeely
Featuring Sean McFeely, Sr. Information Analyst at Valvoline’s Integral Defense This year at Cb Connect 2018, we had our first ever Developer Day to recognize our vibrant partner and developer ecosystem. We had an amazing group of 100 developers attend, culminating in a hackathon. Sean McFeely, S...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone_Os
Apple-Remote-Crash-Tool-CVE-2018-4407 Crashes any macOS High S...
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerabilities
The Cisco Adaptive Security Appliance ASA, Adaptive Security Appliance is a set of firewall appliances from Cisco, U.S.A. Cisco Firepower Threat Defense is a set of software from Cisco, U.S.A., that runs in firewalls. A denial of service vulnerability exists in the Cisco Adaptive Security Applian...
Introducing Malwarebytes for Chromebook
Have you been thinking about switching over to Chromebook because you don’t need all the built-in software programs of a PC or the sleek design of a Mac? Or perhaps you’ve already made the jump because Chromebooks are so much cheaper than a Windows or Mac system. Either way, did you worry that yo...
CVE-2018-15454
A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...
Cisco Releases Security Advisory
Cisco has released a security advisory to address a vulnerability affecting Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. NCCIC encourages users and administrators ...
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability
A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...