What’s New in InsightIDR: Q3 2020 in Review

In July, we provided a rundown of what was new in InsightIDR, our cloud-based SIEM tool, from the first half of 2020 check out the blog post here for a recap. We’ve released some pretty great features and updates since then, so we thought it was time for another recap! This post offers a closer...

SQL Injection

apache-superset is vulnerable to SQL injection. The vulnerability allows an attacker to inject and execute arbitrary SQL statements using invalid column names in groupby, columns, filters, or metrics queries...

PT-2018-14924

Name of the Vulnerable Software and Affected Versions Google Monorail versions prior to 2018-06-07 Description The issue allows for Cross-Site Search XS-Search due to CSV downloads being affected by CSRF. Calculations of download times, specifically for requests with a crafted groupby value, can ...

Google Monorail Cross-Site Search Vulnerability

Google Monorail is an issue tracker from Google USA. A security vulnerability exists in versions of Google Monorail prior to 2018-06-07. An attacker can exploit the vulnerability by sending a request with a specially crafted 'groupby' parameter value to obtain sensitive information about bug...