4479 matches found
Authentication flaw
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting...
CVE-2022-1067 ICSMA-22-095-01 LifePoint Informatics Patient Portal
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting...
CVE-2022-1067 ICSMA-22-095-01 LifePoint Informatics Patient Portal
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting...
DarthSidious - Building An Active Directory Domain And Hacking It
The goal is simple To share my modest knowledge about hacking Windows systems. This is commonly refered to as red team exercises. This book however, is also very concerned with the blue team; the defenders. That is, helping those who are working as defenders, analysts and security experts to buil...
Exploit for Code Injection in Vmware Spring_Framework
Spring Core RCE/CVE-2022-22965 Impacted versions: Spring fr...
GitHub Security Lab: [Java]: CWE-200 - Query to detect insecure WebResourceResponse implementation
This bug was reported directly to GitHub Security Lab...
WordPress One Click Demo Import plugin <= 3.0.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by YICHENG LIU-ZTE CHENFENG lab in WordPress One Click Demo Import plugin versions = 3.0.2. Solution Update the WordPress One Click Demo Import plugin to the latest available version at least 3.1.0...
WordPress Podcast Importer SecondLine plugin <= 1.3.7 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability discovered by YICHENG LIU-ZTE CHENFENG lab in WordPress Podcast Importer SecondLine plugin versions = 1.3.7. Solution Update the WordPress Podcast Importer SecondLine plugin to the latest available version at least 1.3.8...
ICT Protege GX/WX 2.08 Client-Side SHA1 Password Hash Disclosure
Summary Protege GX is an enterprise level integrated access control, intrusion detection and building automation solution with a feature set that is easy to operate, simple to integrate and effortless to extend. Protege WX is an all-in-one, web-based, cross-platform system that gives you a fully...
S1EM - This Project Is A SIEM With SIRP And Threat Intel, All In One
Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly interoperable. S1EM ...
GitHub Security Lab: CPP: Add query for CWE-377 Insecure Temporary File
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Python]: CWE-611: XXE
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java]: Add JDBC connection SSRF sinks
This bug was reported directly to GitHub Security Lab...
Network Olympus SQL Injection Vulnerability
Network Olympus is Softinventive Lab's enterprise network for agentless monitoring. Network Olympus version 1.8.0 is vulnerable to SQL injection, which stems from a missing sqlparameter JSON parameter in /api/eventinstance validation of external input SQL statements. An attacker could exploit thi...
Details of an NSA Hacking Operation
Pangu Lab in China just published a report of a hacking operation by the Equation Group aka the NSA. It noticed the hack in 2013, and was able to map it with Equation Group tools published by the Shadow Brokers aka some Russian group. …the scope of victims exceeded 287 targets in 45 countries,...
lab-moelln.de Improper Access Control vulnerability OBB-2394471
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GitHub Security Lab: [Java]: Timing attacks while comparing the headers value
This bug was reported directly to GitHub Security Lab...
Social Media Hijacking Malware Spreading Through Gaming Apps on Microsoft Store
A new malware capable of controlling social media accounts is being distributed through Microsoft's official app store in the form of trojanized gaming apps, infecting more than 5,000 Windows machines in Sweden, Bulgaria, Russia, Bermuda, and Spain. Israeli cybersecurity company Check Point dubbe...
Akamai Wins Brandon Hall Award for Best Learning Technology
The Technical Enablement and Education team, part of Akamai’s Global Services organization, has won a coveted Brandon Hall Group silver medal for “Excellence in Technology,” for their automatic hands-on Lab Validation System LVS. The automatic LVS is used throughout Global Service training course...