Foscam camera remote command injection vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. Foscam camera has a remote command injection vulnerability in the modelName in the /mnt/mtd/app/config/ProductConfig.xml file. By installing the ProductConfig.xml file in...

openssl: ECDSA P-256 timing attack key recovery

A timing attack flaw was found in OpenSSL that could allow a malicious user with local access to recover ECDSA P-256 private keys...

How to Deploy Veeam Configuration Database in SQL AlwaysOn Availability Group

Multi-subnet SQL AlwaysOn clusters are not supported for hosting the Veeam Backup & Replication or Veeam Backup Enterprise Manager configuration databases. Purpose This article provides information on using a SQL AlwaysOn Availability Group to host the Veeam Backup & Replication and/or Veeam Back...

openSUSE Security Update : mariadb (openSUSE-2017-644)

This update for mariadb fixes the following issues : - update to MariaDB 10.0.30 GA - notable changes : - XtraDB updated to 5.6.35-80.0 - TokuDB updated to 5.6.35-80.0 - PCRE updated to 8.40 - MDEV-11027: better InnoDB crash recovery progress reporting - MDEV-11520: improvements to how InnoDB dat...

SUSE-SU-2017:1479-1 Security update for ceph

This update provides Ceph 10.2.6, which brings fixes and enhancements: This security issue was fixed: - CVE-2016-9579: Do not abort RGW server when accepting a CORS request with short origin. bsc1014986 These non-security issues were fixed: - common: Add rdbmap to ceph-common. bsc1029482 -...

WannaCry Coding Mistakes Can Help Files Recovery Even After Infection

Last month WannaCry ransomware hit more than 300,000 PCs across the world within just 72 hours by using its self-spreading capabilities to infect vulnerable Windows PCs, particularly those using vulnerable versions of the OS, within the same network. But that doesn't mean WannaCry was a...

WannaCry Development Errors Enable File Recovery

WannaCry may have caused worldwide havoc on May 12 when it rode the coattails of the NSA’s weaponized EternalBlue exploit to infect computers in 150 countries, but that doesn’t mean it was a quality piece of ransomware. A number of programming errors in the code are floating to the surface and...

Cross-origin brute-forcing of Github SAML and 2FA recovery codes

Yesterday while reading my Twitter stream I found this interesting article about downloading GitHub SSO bypass codes. Same as Yasin Soliman I was invited to a Github pre-release of the organisation SAML single sign-on SSO private program. And same as him I found an issue in the same endpoint. So ...

Microsoft Azure Recovery Services Agent DLL Hijacking

Hi @ll, MARSAgentInstaller.exe, the Microsoft Azure Recovery Services Agent, available via from is vulnerable: it allows arbitrary code execution via DLL hijacking, resulting in escalation of privilege on standard installations of Windows. MARSAgentInstaller.exe version 2.0.9072.0, digitally sign...

CVE-2017-7731

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature...

CVE-2017-7731

The CVE-2017-7731 entry concerns Fortinet FortiPortal, where a weak password recovery vulnerability affects FortiPortal versions 4.0.0 and earlier, enabling information disclosure via the Forgotten Password feature. Per available documents, the issue allows partial confidentiality exposure with n...

Revised Active Defense Bill Allows Victims to Recover or Destroy Stolen Data

A controversial bill that would allow organizations that have been breached to hack back has undergone revisions that include an exemption permitting victims to recover or destroy their data on an attacker’s infrastructure. Rep. Tom Graves R-GA introduced the updated Active Cyber Defense Certaint...

Sierra Wireless GX440 weak password vulnerability (CNVD-2017-10180)

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. The Sierra Wireless GX440 suffers from a weak password vulnerability that can be exploited by a remote attacker to submit a special request to recover the password...

Available Tools Making Dent in WannaCry Encryption

Tools are beginning to emerge that can be used to start the process of recovering files encrypted by WannaCry on some Windows systems. This takes on extra urgency because today marks one week from the initial outbreak, and files encrypted during that first wave are on the clock and close to being...

Plaintext Message Recovery

aescrypt uses an insecure cipher. The library uses the unauthenticated encryption mode CBC encryption which is vulnerable to ciphertext attacks allowing attackers to make undetectable changes to the plaintext...

Release Notes for Veeam Backup & Replication 9.5 Update 2

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 2 Cause Please confirm you are running version 9.5.0.580, 9.5.0.711, 9.5.0.802, or 9.5.0.823 prior to...

CVE-2017-8851

An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA images, the fact that both products use the same OTA verification keys, and the fact that both products share the same 'ro.build.product' system property, attackers can install OTAs ...

CVE-2017-5948

An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade attacks. This is due to a lenient 'updater-script' in OTAs that does not check that the current version is lower than or equal to the given image's. Downgrades can occur even on...

CVE-2017-2680

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected...

Design/Logic Flaw

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected...