9972 matches found
DEBIAN-CVE-2018-16857
Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords to restrict brute forcing of passwords in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been...
Building Better Evaluation Criteria for Linux Security
Carbon Black recently published a report on the challenges of securing Linux-based operating systems and how Carbon Black is redesigning the approach. For more information about how the Cb Predictive Security Cloud, Carbon Black's consolidated endpoint security platform, helps enterprises cut cos...
Get the message: Your shopper data is trying to tell you something
This article originally appeared in Internet Retailer As we head into the thick of the holiday shopping season, web teams must make sure the path from discovery to purchase is as easy and painless as possible. Knowing where potential fail points are ahead of time makes it easier to prepare, while...
Even More on Threat Hunting
In response to my post More on Threat Hunting, Rob Lee asked: Do you consider detection through ID’ing/“matching” TTPs not hunting? To answer this question, we must begin by clarifying "TTPs." Most readers know TTPs to mean tactics, techniques and procedures, defined by David Bianco in his Pyrami...
CVE-2018-19410
CVE-2018-19410 affects Paessler PRTG Network Monitor prior to 18.2.40.1683. An unauthenticated remote attacker can craft HTTP requests to override the include directive in /public/login.htm, trigger a Local File Inclusion by including /api/addusers, and create users with read-write privileges (in...
iKeyMonitor Spy App for iPhone and Android: Best Remote Monitoring Tool
By Carolina Nowadays, it has become a social rule to own a smartphone, and humanity has become more dependent on social networks than ever before. We need to be connected to the Internet at all times and we publish our most private and personal thoughts there. Even in social events people spend...
School Attendance Monitoring System Cross-Site Request Forgery Vulnerability (CNVD-2019-00825)
School Attendance Monitoring System is a school attendance monitoring system. A cross-site request forgery vulnerability exists in School Attendance Monitoring System version 1.0, which can be exploited by remote attackers to update administrator information via the /user/user/edit.php file...
School Equipment Monitoring System SQL Injection Vulnerability
School Equipment Monitoring System is a school equipment management system. A SQL injection vulnerability exists in School Equipment Monitoring System version 1.0. A remote attacker can use the login page to view, add, modify, or delete information in the back-end database...
School Attendance Monitoring System Cross-Site Request Forgery Vulnerability (CNVD-2019-00384)
School Attendance Monitoring System is a school attendance monitoring system. A cross-site request forgery vulnerability exists in School Attendance Monitoring System version 1.0. A remote attacker can exploit this vulnerability to upload arbitrary files using the event/controller.php?action=phot...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Monitoring. IBM Monitoring has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsin...
CVE-2018-19311
Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...
Design/Logic Flaw
Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...
CVE-2018-18806
School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...
CVE-2018-18806
School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...
CVE-2018-18799
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...
CVE-2018-18797
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php...
CVE-2018-18797
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php...
Cross site request forgery (csrf)
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php...