Why You Need a Database Audit Trail

Your ability to answer very detailed questions about what’s going on in your organization’s databases can make or break a compliance audit or security investigation. Aside from the obvious need for this information in the event of a breach, it’s also important because government, financial, and...

Philips In.Sight B120/37 Information Disclosure Vulnerability

The Philips In.Sight B120/37 is a video monitoring device for infants from Philips Netherlands. An information disclosure vulnerability exists in the Philips In.Sight B120/37. A remote attacker could exploit the vulnerability to obtain sensitive information...

iBaby M3S Privilege Acquisition Vulnerability

The iBaby M3S is a video monitoring device for babies. A privilege acquisition vulnerability exists in iBaby M3S. An attacker can exploit this vulnerability to gain access to the underlying operating system...

Load Balancing and Monitoring Delivery Controllers

This article describes how to load balance the Desktop Delivery Controller via NetScaler with Connection Leasing...

Philips In.Sight B120/37 Cross-Site Scripting Vulnerability

The Philips In.Sight B120/37 is a video monitoring device for infants from Philips Netherlands. A cross-site scripting vulnerability exists in the Philips In.Sight B120/37. Sight B120/37 can be exploited by a remote attacker to inject arbitrary web script or HTML via the name parameter...

CVE-2017-6088

Multiple SQL injection vulnerabilities in EyesOfNetwork aka EON 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 bpname, 2 display, 3 search, or 4 equipment parameter to module/monitoringged/gedfunctions.php or the 5 type parameter to...

InsightVM: Analytics-driven Vulnerability Management, All The Way To The End(point)

In 2015 Rapid7 introduced the Insight platform, built to reduce the complexity inherent in security analytics. This reality was introduced first to our InsightIDR users, who now had the capabilities of a SIEM, powered by user behavior analytics UBA and endpoint detection. Soon we started to roll...

Microsoft Edge CVE-2017-0093 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...

Microsoft Windows Hyper-V CVE-2017-0169 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 8.1 for x64-based Systems Microsoft Windows Server 2012 Microsoft...

Microsoft Windows Hyper-V CVE-2017-0162 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Window...

Riverbed Patches Vulnerabilities in Application Monitoring Portal

Riverbed Technology has patched four serious vulnerabilities in its SteelCentral portal, a centralized application performance monitoring platform. The flaws could allow an attacker to access critical application data and move through the network to other Riverbed agents feeding data into the...

Securitybot - Distributed alerting for the masses!

Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster and more...

Understanding the Capacity Management Challenges of Database Monitoring Solutions

Database monitoring requires hardware resources such as storage space and processing power that can withstand the volume of database usage in your organization. A higher usage volume will require more resources. So how can you optimize the resources used by your database monitoring solution? Do y...

netattack - Scan and Attack Wireless Networks

The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. USAGE EASY SCANNING FOR WIFI NETWORKS python netattack.py -scan -mon This example...

Debian DLA-884-1 : collectd security update

It was discovered that there was an infinite loop vulnerability in collectd, a statistics collection and monitoring daemon. When a correct 'Signature part' is received by an instance configured without the AuthFile option, an endless loop occurs in the parsepacket routine due to a missing pointer...

[SECURITY] [DLA 884-1] collectd security update

Package : collectd Version : 5.1.0-3+deb7u3 CVE ID : CVE-2017-7401 Debian Bug : 859494 It was discovered that there was an infinite loop vulnerability in collectd, a statistics collection and monitoring daemon. When a correct "Signature part" is received by an instance configured without the...

Monitor USB Devices: USB Canary

Monitor USB Devices for potential security breach USB Canary is a Linux tool that uses pyudev to monitor devices while your computer is locked. In case it detects someone plugging in or unplugging devices it can be configured to send you an SMS or alert you via Slack of the potential security...

AVIC Star Beidou Intelligent Transportation Monitoring Platform suffers from s2-045 Remote Command Execution Vulnerability

AVIC Star Beidou Intelligent Transportation Monitoring Platform is a networking and joint control system with instant data transmission. AVIC Star Beidou Intelligent Traffic Monitoring Platform suffers from the s2-045 remote command execution vulnerability. This vulnerability allows an attacker t...

BSA-2017-219

Security Advisory ID : BSA-2017-219 Component : ntp Revision : 1.0: Interim An exploitable configuration modification vulnerability exists in the control mode mode 6 functionality ofntpd. If, against long-standing BCP recommendations, "restrict defaultnoquery..." is not specified, a specially...

EyesOfNetwork (EON) 5.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications CVE-2017-6088 EON 5.0 Multiple SQL Injection Description EyesOfNetwork "EON" is an OpenSource network monitoring solution. SQL injection authenticated The Eonweb code does not correctly filter arguments, allowing authenticated users to inject...