Fedora: Security Advisory for nagios (FEDORA-2021-01a2f76cc3)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SAP Solution Manager Remote Code Execution (CVE-2020-6207)

A remote code execution vulnerability exists in SAP Solution Manager. The vulnerability is due to a lack of authentication in the User Experience Monitoring componant. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful...

[SECURITY] Fedora 34 Update: nagios-4.4.6-4.fc34

Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux and some other NIX variants as a background process,...

maltrail

This is a Python script repository for a malicious traffic detection system called Maltrail. The repository contains various files and directories, including configuration files, data storage files, and scripts for data processing and analysis. The script uses a variety of techniques to detect...

HVM soft-reset crashes toolstack

ISSUE DESCRIPTION libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the...

Arbitrary Password Reset Vulnerability in Hikvision's Integrated Video and Environmental Monitoring Management System

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. An arbitrary password reset vulnerability exists in Hikvision's integrated video and environmental surveillance management system, which can be exploited by attackers to...

Grafana Labs Grafana Enterprise 安全漏洞

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. A security vulnerability exists in Grafana Enterprise that allows access restrictions ...

SQL Injection Vulnerability in Myeye Backend

Myeye is a monitoring and control system. A SQL injection vulnerability exists in the backend of Myeye. An attacker can exploit the vulnerability to obtain sensitive database information...

Logic Flaw Vulnerability in the Kato Manphase-Host Auto-adaptive Security Platform

The Mantou Manphase-Host Adaptive Security Platform adopts an adaptive security architecture that effectively solves the passive situation of traditional defense-focused approaches and adds a strong real-time monitoring and response capability to the system. A logic flaw vulnerability exists in t...

USN-4800-1: Lynx vulnerabilities

It was discovered that Lynx incorrectly handled certain URLs. A remote attacker could possibly use this issue to obtain sensitive information or other unspecified impact. This issue only affected Ubuntu 16.04 ESM. CVE-2016-9179 It was discovered that Lynx incorrectly handled certain HTML files. A...

5 steps to enable your corporate SOC to rapidly detect and respond to IoT/OT threats

As organizations connect massive numbers of IoT/OT devices to their networks to optimize operations, boards and management teams are increasingly concerned about the expanding attack surface and corporate liability that they represent. These connected devices can be compromised by adversaries to...

Monitoring Of Students Cyber Accounts System 1.0 Cross Site Scripting

Exploit Title: Monitoring of Students Cyber Accounts System | Stored XSS Exploit Author: Richard Jones Date: 2021-03-12 Vendor Homepage: https://www.sourcecodester.com/php/11743/monitoring-students-cyber-accounts.html Software Link:...

Unauthorized Access Vulnerability in Homs5.0 Monitoring Center of Beijing Shuoren Times Technology Co.

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Beijing Shuoren Times Technology Co., Ltd Homs5.0 monitoring...

Anatomy of a Security Super Bowl Dynasty, Part 3: Special Teams and Coaching

Imperva Directors of Technology in the Office of the CTO, Brian Anderson and Craig Burlingame, recently conducted an informal education session titled, Creating a Security Super Bowl Dynasty. In this presentation, they illustrated the ways American football teams create consistent, sustainable...

Monitoring Of Students Cyber Accounts System 1.0 SQL Injection

Exploit Title: Monitoring of Students Cyber Accounts System | 'un' SQL Injection Exploit Author: Richard Jones Date: 2021-03-12 Vendor Homepage: https://www.sourcecodester.com/php/11743/monitoring-students-cyber-accounts.html Software Link:...

Monitoring System (Dashboard) 1.0 SQL Injection

Exploit Title: Monitoring System Dashboard | SQL Injection uname parameter Exploit Author: Richard Jones Date: 2021-01-26 Vendor Homepage: https://www.sourcecodester.com/php/11741/monitoring-system-dashboard.html Software Link:...

Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated) Exploit

Exploit Title: Monitoring System Dashboard 1.0 - File Upload RCE Authenticated Exploit Author: Richard Jones Date: 2021-03-11 Vendor Homepage: https://www.sourcecodester.com/php/11741/monitoring-system-dashboard.html Software Link:...

Monitoring System (Dashboard) 1.0 Shell Upload

Exploit Title: Monitoring System Dashboard | Authenticated Arbitrary File Upload to Remote Code Execution Exploit Author: Richard Jones Date: 2021-01-26 Vendor Homepage: https://www.sourcecodester.com/php/11741/monitoring-system-dashboard.html Software Link:...

Monitoring Of Students Cyber Accounts System 1.0 SQL Injection Vulnerability

Exploit Title: Monitoring of Students Cyber Accounts System | 'un' SQL Injection Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/11743/monitoring-students-cyber-accounts.html Software Link:...

Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated)

Exploit Title: Monitoring System Dashboard 1.0 - File Upload RCE Authenticated Exploit Author: Richard Jones Date: 2021-03-11 Vendor Homepage: https://www.sourcecodester.com/php/11741/monitoring-system-dashboard.html Software Link:...