Logic Flaw Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd.

Siltronic is committed to the cause of disaster reduction and profitability, providing the government with comprehensive solutions for disaster reduction and profitability informatization; providing enterprises with information and application services for disaster reduction and profitability; an...

Weak Password Vulnerability in Guangzhou Kingston's Dynamic Loop Monitoring Backend System

Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales, and is the leading developer and manufacturer of networked computer room power environment monitoring equipment in China. A weak password vulnerability exists in the back-end system of...

Directory Traversal Vulnerability in Dynamic Ring Monitoring Backend System of Guangzhou Kingston Electronic Technology Co.

Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales. A directory traversal vulnerability exists in the back-end system of Guangzhou Kingston Electronic Technology Co. An attacker can exploit this vulnerability to obtain sensitive...

SQL Injection Vulnerability in Dynamic Ring Monitoring Backend System of Guangzhou Kingston Electronic Technology Company Limited (CNVD-2021-54063)

Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales, and is the leading developer and manufacturer of networked computer room power environment monitoring equipment in China. Guangzhou Kingston Electronic Technology Co., Ltd. dynamic rin...

Guess Fashion Deals With Data Loss, Post-Ransomware

A February ransomware attack on fashion label Guess linked to Colonial Pipeline attackers DarkSide is still causing damage. Guess has started sending letters to 1,300 employees and contractors who had their personal and banking data exposed during the breach. The letter, published by...

Kaseya VSA SQL Injection Vulnerability

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A SQL injection vulnerability exists in Kaseya VSA versions prior to 9.5.5, which can be exploited by an attacker to...

IBM Tivoli Netcool/OMNIbus Web GUI Cross-Site Scripting Vulnerability (CNVD-2021-57448)

IBM Tivoli Netcool/OMNIbus is a service level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is the web-based application version of the system that displays event data from multiple data sources in a variety of graphical formats ...

Kaseya VSA Cross-Site Scripting Vulnerability

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A cross-site scripting vulnerability exists in Kaseya VSA, which can be exploited by an attacker to execute client-sid...

Kaseya VSA Security Bypass Vulnerability

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A security vulnerability exists in Kaseya VSA that stems from a 2FA bypass. No details of the vulnerability are provid...

IBM Tivoli Netcool/OMNIbus Web GUI Storage Based Cross-Site Scripting Vulnerability

IBM Tivoli Netcool/OMNIbus is a service-level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is a web-based application version of the system that displays event data from multiple data sources in a variety of graphical formats in...

Kaseya VSA Code Injection Vulnerability

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. Kaseya VSA is vulnerable to a code injection vulnerability, no details of the vulnerability are provided at this time...

CVE-2021-32747

Icinga Web 2 had a vulnerability where custom variables (user-defined keys/values in configuration objects) could be exposed to unauthorized users for versions 2.0.0 through 2.8.2. The issue occurs because custom variables are displayed to logged-in users with access to the relevant hosts/service...

CVE-2021-32746

Icinga Web 2 versions 2.3.0–2.8.2 expose a vulnerability in the built‑in doc module that, via a specific route, allows reading arbitrary files accessible to the web server user. The issue is fixed in 2.9.0, 2.8.3, and 2.7.5. Workarounds include disabling the doc module or revoking access permissi...

How to monitor xenserver resource utilization on Citrix ADC

How to monitor xenserver resource utilization on Citrix ADC...

Logic Flaw Vulnerability in Homs 5.0 Monitoring Center

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Homs5.0 monitoring center has a logic flaw vulnerability,...

New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021

For years, security professionals have recognized the need to enhance SaaS security. However, the exponential adoption of Software-as-a-Service SaaS applications over 2020 turned slow-burning embers into a raging fire. Organizations manage anywhere from thirty-five to more than a hundred...

NinjaRMM Access Control Error Vulnerability

NinjaRMM is a remote monitoring and management software from NinjaRMM USA. Improve business efficiency by combining monitoring, alerting, patching, antivirus, backup and IT automation all in a single management platform. An Access Control Error vulnerability exists in NinjaRMM, which arises from...

Kaseya VSA SQL注入漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A SQL injection vulnerability exists in Kaseya VSA versions prior to 9.5.5, which can be exploited by an attacker to...

NinjaRMM has an unspecified vulnerability

NinjaRMM is a remote monitoring and management software from NinjaRMM USA. Improve business efficiency by combining monitoring, alerting, patching, antivirus, backup and IT automation all in a single management platform. NinjaRMM suffers from a security vulnerability that stems from insecure Agen...

Top 10 Cloud security tips

About half of the pen tests we’re asked to do involved cloud services at some point. We’ve even tested a cloud platform on an aeroplane – the irony was not lost on us! There is a multitude of ways to improve the security of your cloud platforms and often those ways are ever-changing or obscured...