12321 matches found
LA Covers Up Bad Cybersecurity
This is bad in several dimensions. The Los Angeles Department of Water and Power has been accused of deliberately keeping widespread gaps in its cybersecurity a secret from regulators in a large-scale coverup involving the city's mayor...
Siemens Spectrum Power 5 Cross-Site Scripting Vulnerability
Siemens Spectrum Power is a system that provides the basic components for SCADA, communication and data modeling of control and monitoring systems. A security vulnerability exists in Siemens Spectrum Power 5, which can be exploited by attackers to conduct cross-site scripting attacks...
CVE-2020-7579
A vulnerability has been identified in Spectrum Power™ 5 All versions v5.50 HF02. The web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to...
CVE-2020-7579
A vulnerability has been identified in Spectrum Power™ 5 All versions v5.50 HF02. The web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to...
Cross site scripting
A vulnerability has been identified in Spectrum Power™ 5 All versions v5.50 HF02. The web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to...
CVE-2020-7579
CVE-2020-7579 affects Siemens Spectrum Power 5 web server, with all versions prior to 5.50 HF02 vulnerable to basic Cross‑Site Scripting (XSS). The flaw arises in the web interface where script-related HTML tags are not properly neutralized, allowing an attacker to lure a user to a malicious link...
Siemens Spectrum Power 5
1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: Spectrum Power 5 Vulnerability: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS 2. RISK EVALUATION Successful exploitation of this vulnerability could...
power-mag.com Cross Site Scripting vulnerability
Security Researcher NUMAN Helped patch 27 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting power-mag.com website and its users. Following coordinated and responsible vulnerability...
RHEL 7 : qemu-kvm-ma (RHSA-2020:0669)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0669 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide the...
Important: Red Hat Security Advisory: qemu-kvm-ma security update
An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
French Firms Rocked by Kasbah Hacker?
A large number of French critical infrastructure firms were hacked as part of an extended malware campaign that appears to have been orchestrated by at least one attacker based in Morocco, KrebsOnSecurity has learned. An individual thought to be involved has earned accolades from the likes of...
Revotech I6032B-P POE 1920x1080P 2.0MP Outdoor Camera Remote Configuration Disclosure Vulnerability
Revotech I6032B-P POE 1920x1080P 2.0MP Outdoor Camera is an outdoor camera. A security vulnerability exists in the Revotech I6032B-P POE 1920x1080P 2.0MP Outdoor Camera. An attacker can exploit the vulnerability to disclose sensitive information...
Defending the power grid against supply chain attacks—Part 1: The risk defined
Most people don’t think about electricity. If the internet works, their food is refrigerated, and their debit card is approved, why should they? Its ubiquity and reliability render it invisible—a bit of magic that powers much of modern life. That is, until a large storm passes through. Localized...
ABB Asset Suite Access Control Error Vulnerability
ABB Asset Suite is a suite of enterprise asset management solutions from ABB Switzerland primarily for the power generation industry. An access control error vulnerability exists in the web interface in ABB Asset Suite. The vulnerability arises from a network system or product not properly...
[SECURITY] Fedora 31 Update: ipmitool-1.8.18-19.fc31
This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...
[SECURITY] Fedora 30 Update: ipmitool-1.8.18-19.fc30
This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...
Admin Check Bypass in NtPowerInformation
The system call NtPowerInformation performs a check that the caller is an administrator before performing some specific power functions. The check is done in the PopUserIsAdmin function. Recent assessments: busterb at May 09, 2019 5:57pm UTC reported: Project zero reason for closure: Info not...
CVE-2013-3725
Invision Power Board IPB through 3.x allows admin account takeover leading to code execution...
