101 matches found
New Docker Container Escape Bug Affects Microsoft Azure Functions
Cybersecurity researcher Paul Litvak today disclosed an unpatched vulnerability in Microsoft Azure Functions that could be used by an attacker to escalate privileges and escape the Docker container used for hosting them. The findings come as part of Intezer Lab's investigations into the Azure...
ASB-A-160605820
Bulletin has no description...
Top Security and Data Privacy Regulations for Financial Services
Regulatory compliance has become an increasingly more important part of the financial services industry in recent years. And it’s a trend that’s likely to continue due to the upsurge in cloud computing, the use of mobile applications, and a shift to IoT devices, all of which are driving exponenti...
The vulnerability of Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.
The vulnerability of Firefox browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...
Siemens EN100 Ethernet Module (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: EN100 Ethernet Module Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Cross-site Scripting, Relative Path Traversal 2. UPDATE...
Privilege Escalation
Keycloak is vulnerable to privilege escalation vulnerability. This is due to an improper implementation of the Brute Force detection algorithm as it does not enforce its protection measures. An attacker can exploit this issue to bypass certain security restrictions and aid in brute-force attacks...
Carbon Black Report Finds Tax Fraud & “Identity Theft On Demand” Continuing to Take Shape on the Dark Web
While online sales of identity and banking information have both been easily accessible to malicious actors for a decade or more, there has been a recent maturation in the dark web economy focused on tax identity theft. Carbon Black’s recent research into various marketplaces on the dark web foun...
CVE-2018-14657
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures...
Dixons Carphone Data Breach Affects 10 Million Customers
Dixons Carphone's 2017 data breach was worse than initially anticipated. In an announcement on Monday, Dixons Carphone, one of the largest consumer electronics and telecommunication retailers in Europe, admitted that the breach affected around 10 million customers, up from an initial estimate of...
SUN-RPC Portmapper DUMP Call
SUN-RPC has a scanning interface. This mode may be used to gather information on a server, such as the services and applications running on it. This protection detects use of the SUN-RPC interface scanning...
In-Spectre-Meltdown - Tool to identify Meltdown & Spectre Vulnerabilities in processors
This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 Meltdown and CVE-2017-5715 Spectre allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways ...
This Android Malware Can Root Your Device And Erase Everything
A new Android malware has been making waves recently that have the capability to gain root access on your smartphone and completely erase your phone's storage. Dubbed Mazar BOT, the serious malware program is loaded with so many hidden capabilities that security researchers are calling it a...
Threat Outbreak Alert RuleID20491: Email Messages Distributing Malicious Software on February 20, 2016
Medium Alert ID: 43058 First Published: 2016 January 19 13:31 GMT Last Updated: 2016 February 22 16:57 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20491...
Android Malware 'Dendroid' targeting Indian Users
The devices are becoming smarter, therefore the chances to abuse them have increased. As the share of Android has become 87% in the global Smartphone market, so the Android is by far an elementary target of the mobile malware developers. The number of malware variants has increased rapidly and...
Check Point found that MediaWiki there is a security vulnerability-vulnerability warning-the black bar safety net
Recently,Check Point Software Technologies Ltd. 1 on 2 9 Septemberissued a safety research and analysis, pointed out that the MediaWiki Web Platform is the presence of significant security vulnerabilities. MediaWiki Web Platform is a popular for creating and maintaining a wiki website open source...
CitiBank hacked & large number of customer data stolen
CitiBank hacked & large number of customer data stolen Security breaches happen, they're going to continue to happen … the mission of the banking industry is to keep the customer base safe and customers feeling secure about their financial transactions and payments Citigroup said today that hacke...
PT-2007-3710 · Getahead · Getahead Dwr
Name of the Vulnerable Software and Affected Versions: Getahead Direct Web Remoting DWR framework version 1.1.4 Description: The issue allows remote attackers to obtain data through a web page that retrieves the data using a URL in the SRC attribute of a SCRIPT element and captures the data using...
cyphorSQL.txt
Hello This is sql injection in cyphor Discovered by : HACKERS PAL Greets For Devil-00 - Abducter - Almaster -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- injected vresions :- Cyphor Release: 0.19 and all Versions Up To now -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- injected File show.php...
