CVE-2017-5781: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5783: Improper Input Validation

A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2016-8531: Exposure of Sensitive Information to an Unauthorized Actor

A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found...

PT-2018-8268

Name of the Vulnerable Software and Affected Versions: HPE Matrix Operating Environment version v7.6 Description: A remote clickjacking issue was discovered. Recommendations: For HPE Matrix Operating Environment version v7.6, update to a version that includes a fix for this issue...

PT-2018-8469

Name of the Vulnerable Software and Affected Versions HPE Matrix Operating Environment version 7.6 LR1 Description A clickjacking issue was discovered in the software. Recommendations For HPE Matrix Operating Environment version 7.6 LR1, at the moment, there is no information about a newer versio...

PT-2018-5026

Name of the Vulnerable Software and Affected Versions HPE Matrix Operating Environment version 7.6 Description A remote privilege escalation issue was discovered. Recommendations For HPE Matrix Operating Environment version 7.6, at the moment, there is no information about a newer version that...

PT-2018-8267

Name of the Vulnerable Software and Affected Versions: HPE Matrix Operating Environment version v7.6 Description: A missing HSTS Header issue was discovered. Recommendations: For HPE Matrix Operating Environment version v7.6, consider implementing HSTS headers to mitigate the risk...

PT-2018-8269

Name of the Vulnerable Software and Affected Versions: HPE Matrix Operating Environment version v7.6 Description: A missing HSTS Header issue was discovered. Recommendations: For HPE Matrix Operating Environment version v7.6, consider implementing HSTS headers to mitigate the risk...

PT-2018-5024

Name of the Vulnerable Software and Affected Versions HPE Matrix Operating Environment version 7.6 Description A remote information disclosure issue was discovered in the software. Recommendations For HPE Matrix Operating Environment version 7.6, update to a version that contains a fix for this...

PT-2018-5025

Name of the Vulnerable Software and Affected Versions HPE Matrix Operating Environment version 7.6 Description A cross-site scripting issue was discovered. Recommendations For HPE Matrix Operating Environment version 7.6, update to a version that includes a fix for this issue...

PT-2018-8265

Name of the Vulnerable Software and Affected Versions: HPE Matrix Operating Environment version v7.6 Description: A remote clickjacking issue was discovered. Recommendations: For HPE Matrix Operating Environment version v7.6, update to a version that includes a fix for this issue...

PT-2018-8470

Name of the Vulnerable Software and Affected Versions HPE Matrix Operating Environment version 7.6 LR1 Description A clickjacking issue was discovered in the software. Recommendations For HPE Matrix Operating Environment version 7.6 LR1, at the moment, there is no information about a newer versio...

PT-2018-8270

Name of the Vulnerable Software and Affected Versions: HPE Matrix Operating Environment version v7.6 Description: A remote information disclosure issue was discovered. Recommendations: For HPE Matrix Operating Environment version v7.6, at the moment, there is no information about a newer version...

PT-2018-8471

Name of the Vulnerable Software and Affected Versions HPE Matrix Operating Environment version 7.6 LR1 Description An improper input validation issue was discovered. Recommendations For HPE Matrix Operating Environment version 7.6 LR1, at the moment, there is no information about a newer version...

CVE-2017-8972: Improper Input Validation

A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2016-8535: Improper Input Validation

A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found...

EZSA-2018-001 Several vulnerabilities in Forgot password, Information collector, XML text, and Matrix field type features

More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-001-several-vulnerabilities-in-forgot-password-information-collector-xml-text-and-matrix-field-type-features...

DEBIAN-CVE-2017-18027

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file...

Partner Perspectives: Red Canary ATT&CKs (Part 1): Why We’re Using ATT&CK Across Red Canary

Editor's Note: This blog originally appeared on RedCanary.com Information security is grounded in risk management. And, because what gets measured gets managed, we rely on a variety of frameworks and key performance indicators to tell us whether we’re moving in the right direction. Frameworks lik...

PHP Scripts Mall MLM Forced Matrix SQL Injection Vulnerability

PHP Scripts Mall MLM Forced Matrix is a set of PHP based online marketing website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall MLM Forced Matrix version 2.0.9. A remote attacker can exploit the vulnerability by sending the 'newid' parameter to the...