CVE-2023-33271

An issue was discovered in DTS Monitoring 3.57.0. The parameter commonname within the SSL Certificate check function is vulnerable to OS command injection blind...

DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which stems from the url parameter in the WGET check function being susceptible to operating system command injection...

CVE-2023-33273

CVE-2023-33273 affects DTS Monitoring 3.57.0 via the url parameter in the WGET check function, which is vulnerable to OS command injection (blind). This is the root cause described across multiple sources, with an impact of potential command execution. No exploit details are provided in the docum...

DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the ip parameter in the Ping check function being susceptible to operating system command injection...

CVE-2023-33269

An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...

CVE-2023-33273

An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection blind...

PT-2023-24256 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the SSL Certificate check function where the common name parameter is vulnerable to OS command injection, specifically blind command injection. Recommendations: For DTS...

PT-2023-24255 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the software where the url parameter within the Curl check function is vulnerable to OS command injection, specifically blind command injection. This means an attacker coul...

PT-2023-24253 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the parameter options within the WGET check function, which is vulnerable to OS command injection blind. Recommendations: For DTS Monitoring version 3.57.0, consider...

PT-2023-24258 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the software where the url parameter within the WGET check function is vulnerable to OS command injection, specifically blind command injection. This means an attacker coul...

CVE-2023-33268

CVE-2023-33268 affects DTS Monitoring 3.57.0. The vulnerability is in the SSL Certificate check function where the port parameter can be exploited to perform an OS command injection (blind). Impact details in connected sources align on the same issue; no exploit specifics or CVSS vectors beyond w...

CVE-2023-33270

CVE-2023-33270 affects DTS Monitoring 3.57.0. The issue is a blind OS command injection in the url parameter of the Curl check function, enabling arbitrary command execution with high impact (C/H/I/H) per the CVSS 3.1 vector. Connected sources confirm the vulnerable component and root cause but d...

DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which stems from the options parameter in the WGET check function being susceptible to operating system command injection...

Unlock Broader Detections and Forensics with Velociraptor in Rapid7 XDR

Nearly 70% of companies that are breached are likely to get breached again within twelve months CPO. Effective remediation and addressing attacks at the root is key to staying ahead of threats and recurring breaches on the endpoint. Strong Digital Forensics and Incident Response DFIR ready to go...

SUSE-SU-2023:3885-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.8 Important Salt minion update SUSE Manager Pay-as-you-go PAYG Automated RHUI credential update Monitoring: Prometheus upgraded to 2.45.0 Monitoring: Apache exporter updated to version 1.0.0 Expose...

ROS-20230928-01

A vulnerability in the Logstash log management system is related to a flaw in TLS certificate validation. Exploitation of the vulnerability could allow an attacker acting remotely to launch a man-in-the-middle attack on Logstash monitoring data. "man-in-the-middle" attack on Logstash monitoring d...

Malwarebytes MDR wins G2 awards for "Best ROI," "Easiest to Use," and more

Malwarebytes Managed Detection and Response MDR earned a placed in 12 new reports on G2s Fall 2023 reports, winning badges for "Easiest to do Business With," "Best Est. ROI," "Easiest to Use," and "Easiest Admin." Purpose-built for resource constrained teams, Malwarebytes MDR provides IT staff wi...

Which security framework? All of them, in the SCF

TL;DR: All roads lead to Rome. There are plenty of ways to meet your security requirements ISO 27001 is not everything. There, I said it What is the Secure Controls Framework SCF? Why you should consider SCF on your journey to security excellence PTP has a myriad of customers coming for help to...

openSUSE 15 Security Update : cacti, cacti-spine (openSUSE-SU-2023:0275-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0275-1 advisory. - Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti...

Elastic Cloud on Kubernetes (ECK) 2.8 Security Update

Elastic Cloud on Kubernetes ECK secret token configuration issue ESA-2023-11 Secret token configuration is never applied when using ECK =8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment. Affected Versions: Elastic Cloud on...