CVE-2018-18567

AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business...

Design/Logic Flaw

Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business...

Design/Logic Flaw

AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business...

Design/Logic Flaw

The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business...

CVE-2018-18567

AudioCodes 440HD/450HD IP Phones (affected version

CVE-2018-18568

Polycom VVX 500/601 devices (affected versions

Trend Micro Redefines Endpoint Security with Apex One™

Today, Trend Micro is excited to bring you Apex One, the evolution of our endpoint security solution for enterprise. Apex One combines a breadth of threat detection & response capability with investigative features, in a single agent. Over the last few years, endpoint investigative features have...

ExchangeRelayX - An NTLM Relay Tool To The EWS Endpoint For On-Premise Exchange Servers (Provides An OWA For Hackers)

Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to perform an SMB or HTTP based NTLM relay attack to the EWS endpoint on an on-premise Microsoft Exchange server to compromise the mailbox of the victim. This tool provides the attacker with an OWA looking interface, with...

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.9 bug fix and enhancement update

Red Hat OpenShift Container Platform release 3.9.27 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud...

Meltdown and Spectre update for WildFire-500 Appliance

Palo Alto Networks has determined that the WildFire-500 WF-500 appliance is affected by the vulnerability disclosures known as Meltdown and Spectre, and has completed an update to address these issues. The WF-500 software update is now available to customers that use the WF-500 appliance for...

Critical: Red Hat Security Advisory: OpenShift Container Platform 3.1 security update

An update is now available for Red Hat OpenShift Container Platform 3.1. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

DDoS attacks are growing: What can businesses do?

Depending on the type and size of your organization, a DDoS Distributed Denial of Service attack can be anything from a small nuisance to something that can break your revenue stream and damage it permanently. A DDoS attack can cripple some online businesses for a period of time long enough to se...

Configuring Citrix StoreFront with the Secure Browser Service

This article describes how existing on-premise XenApp/XenDesktop customers can integrate and deliver Secure Browser via their existing Storefronts to end users...

Pulse Secure Pulse One On-Premise Input Validation Vulnerability

Pulse Secure Pulse One On-Premise is a cloud-based IT management software from Pulse Secure, USA. The software features endpoint management, mobile device management, log auditing and system monitoring. An input validation vulnerability exists in Pulse Secure Pulse One On-Premise 2.0.1649 and pri...

CVE-2017-8156

The outdoor unit of Customer Premise Equipment CPE product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow t...

CVE-2017-8155

The outdoor unit of Customer Premise Equipment CPE product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor units of the CPE, an attacker can deliver commands to the specific port of the outdoor unit and...

CVE-2017-8156

CVE-2017-8156 is a no-authentication serial-port vulnerability in Huawei CPE outdoor unit B2338-168 V100R001C00. The issue allows an attacker with physical access to log in to the device via the serial console and take control of the outdoor unit. The Huawei PSIRT advisory confirms two related vu...

Customer-driven Rapid Innovation for Hybrid Cloud Security

Cyber threats have no boundaries; they come in new and evolving forms, capable of striking at any time … so it becomes important that your threat protection extends beyond conventional boundaries as well. In the past, on premise versions of security solutions were held up by long development cycl...

CVE-2017-14935

Pulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which allows remote users to query and obtain sensitive information...

CVE-2017-14935

Pulse One On-Premise 2.0.1649 and earlier versions have an input-validation vulnerability that allows remote users to query and obtain sensitive information. The issue affects Pulse Secure Pulse One On-Premise and is documented as CVE-2017-14935. The root cause is improper validation of requests,...