NSA and NCSC Release Joint Advisory on Turla Group Activity

The National Security Agency NSA and the United Kingdom National Cyber Security Centre NCSC have released a joint advisory on advanced persistent threat APT group Turla—widely reported to be Russian and also known as Snake, Uroburos, VENEMOUS BEAR, or Waterbug. The advisory provides an update to...

Design/Logic Flaw

A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full...

CVE-2019-5024

A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full...

CVE-2019-5024

A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full...

CVE-2019-5024

Capsule Technologies SmartLinx Neuron 2 devices (firmware 9.0.3 and older) contain a restricted environment escape vulnerability in kiosk mode. A specific sequence of USB keyboard inputs can escape the restricted environment and grant full administrator access to the underlying Windows OS. Affect...

CVE-2019-5024

A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full...

CVE-2019-5024: Protection Mechanism Failure

A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full...

Capsule Technologies SmartLinx Neuron 2 restricted environment protection mechanism failure vulnerability

Summary A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in ful...

NCSC Releases Security Advisory

The United Kingdom's National Cyber Security Centre NCSC has released a report updating its guidance on Turla Neuron malware, which provides a platform to steal sensitive data. NCSC provides enhanced cybersecurity services to protect against cybersecurity threats. NCCIC/US-CERT encourages users a...

NCSC Releases Security Advisory

The United Kingdom's National Cyber Security Centre NCSC has released an advisory to highlight Neuron and Nautilus tools used alongside Snake—malware that provides a platform to steal sensitive data. NCSC provides enhanced cybersecurity services to protect against cybersecurity threats. US-CERT...

Neuron News 1.0 Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26896/info Neuron News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and two cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting...

Онлайн семинары, источники.

В этой теме собираем информацию о ресурсах проводящих онлайн конференции по нашей тематике. На данный момент это: Вебинары: от Positive Technologies от Neuron hackspace Презентации: Так же можно послушать радио от Eset:...

WanHu ezEIP 2. 0 injection vulnerability 0day-vulnerability warning-the black bar safety net

System name: WanHu ezEIP System version: 2.0 Vulnerability found by: Akast N. S. T Security team: Neuron Security Team Vulnerability type: SQL injection Vulnerability file:/caseinfo. asp Vulnerability variable: Newid=1&cid=1 Software type: business software Development company: Guangzhou million...

CVE-2007-6540

SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the topic parameter in a viewtopic action, or the 2 newsyear or 3 newsmonth parameter in a newsarchive action to the default URI in patch/...

Sql injection

SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/...

CVE-2007-6541

Multiple cross-site scripting XSS vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the topic parameter in a viewtopic action, or the 2 newsyear or 3 newsmonth parameter in a newsarchive action to the default URI in patch/...

CVE-2007-6540

SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/...

CVE-2007-6541

CVE-2007-6541 describes multiple cross-site scripting (XSS) vulnerabilities in the web application neuron news 1.0 . The flaw allows remote attackers to inject arbitrary web script or HTML via 1) the topic parameter in a viewtopic action, or 2) the newsyear or 3) the newsmonth parameter in a news...

CVE-2007-6541

Multiple cross-site scripting XSS vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the topic parameter in a viewtopic action, or the 2 newsyear or 3 newsmonth parameter in a newsarchive action to the default URI in patch/...