9974 matches found
Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)
Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes API server that could enable a privilege escalation from a compromised node CVE-2020-8559 Vulnerability Details CVEID: CVE-2020-8559 Description: Kubernetes kube-apiserver could allow a remote...
Sichuan Institute of Safety Science and Technology Coal Mine Remote Monitoring Comprehensive Management System 2016 Version Exists SQL Injection Vulnerability
Sichuan Province coal mine remote integrated monitoring system is a system that can realize remote real-time monitoring of coal mine underground sensing data through the Internet and summarize, analyze and alarm the integrated monitoring and management in a timely manner. Sichuan Institute of...
Docker for Pentest - Image With The More Used Tools To Create A Pentest Environment Easily And Quickly
Docker for pentest is an image with the more used tools to create an pentest environment easily and quickly. Features OS, networking, developing and pentesting tools installed. Connection to HTB Hack the Box vpn to access HTB machines. Popular wordlists installed: SecLists, dirb, dirbuster, fuzzd...
The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the monitoring tool for the vRealize Operations virtual infrastructure is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.
The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
Siemens SICAM MMU, SGU and T Information Disclosure Vulnerabilities
SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...
Siemens SICAM MMU, SGU and T Cross-Site Scripting Vulnerabilities
SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...
Siemens SICAM MMU, SGU and T Sensitive Information Disclosure Vulnerability
SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...
Multiple Cross-Site Scripting Vulnerabilities in Pandora FMS
Pandora FMS is a monitoring system from Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. Pandora FMS has multiple cross-site scripting vulnerabilities in multiple browser views. An attacker can exploit the vulnerabilities ...
Hacker steals databases from breach monitoring site; sells them online
By Sudais Asif DataViper, a breach monitoring site is owned by... This is a post from HackRead.com Read the original post: Hacker steals databases from breach monitoring site; sells them online...
The Enemy Within: How Insider Threats Are Changing
Insider threats are ramping up – with new kinds of concerns in this category beginning to emerge. This is happening against a heady backdrop: Makeshift home offices, a cavalcade of new distractions and a tectonic shift to the cloud have recently collided to create an entirely new world for...
Command Execution Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.
AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co. Ltd. suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...
Google Bans Stalkerware Ads – With a Loophole
Google will soon prohibit ads on its platform that promote stalkerware products and services – but the tech giant’s ban comes with a catch that some security experts worry will render it ineffective. Starting August 2020, Google’s ads policy will be updated to ban advertisements for stalkerware,...
CVE-2020-15526
In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...
BlueLeaks Server Seized By German Police: Report
German authorities have reportedly seized a server hosting the massive BlueLeaks data dump, which was released earlier in June and exposed thousands of sensitive police department and law enforcement files. According to a Wednesday report by PCMag, the server was based in Falkenstein, Germany and...
NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44582)
NeDi Consulting NeDi is a suite of open source software that supports discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary JavaScri...
NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44579)
NeDi Consulting NeDi is a suite of open source software that supports the discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary...
NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44581)
NeDi Consulting NeDi is a suite of open source software that supports the discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary...
Fedora: Security Advisory for gst (FEDORA-2020-9e6f5b3ae2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...