SQL Injection Vulnerability in us*** Parameters of BioReda's Security Management System Platform

Based on the latest B/S architecture design, Bio Raider Security Management Platform is a digital, networked and security integrated system platform. Bio Raider Security Management System can be applied to government, enterprises, prisons, schools, smart communities and other security requirement...

IBM QRadar SIEM Server-Side Request Forgery Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A server-side...

Information leakage vulnerability in the security management information system of the hotel industry

The Hotel Industry Security Management Information System HISMIS is a system that manages travelers' occupancy information. There is an information leakage vulnerability in the Hotel Security Management Information System. An attacker could exploit this vulnerability to obtain sensitive informati...

File Upload Vulnerability in Isthmus Electronic Document Security Management System

Electronic document security management system referred to as: CDG is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption and protection of electronic documents, to prevent the internal staff leakage a...

CVE-2019-12635

A vulnerability in the authorization module of Cisco Content Security Management Appliance SMA Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls...

CVE-2019-12635

CVE-2019-12635 affects Cisco’s Content Security Management Appliance (SMA) software. The issue is in the authorization module where role permission controls are not correctly enforced, enabling an authenticated, remote attacker with a crafted/custom role to cause out-of-scope access to users’ ema...

CVE-2019-12635 Cisco Content Security Management Appliance Information Disclosure Vulnerability

A vulnerability in the authorization module of Cisco Content Security Management Appliance SMA Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Cisco Content Security Management Appliance Authorization Issues Vulnerability

Cisco Content Security Management Appliance SMA is a set of content security management equipment from Cisco Cisco. The appliance is mainly used to manage all policies, reports, audit information, etc. for e-mail and Web security devices. The Cisco Content Security Management Appliance is...

Cisco Content Security Management Virtual Appliance M600V IronPort Header Injection

!/usr/bin/perl -w Cisco Content Security Management Virtual Appliance M600V IronPort Remote Header 'Host' Injection Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the...

Cisco M1070 Content Security Management Appliance IronPort Header Injection

!/usr/bin/perl -w Cisco M1070 Content Security Management Appliance IronPort Remote Header 'Host' Injection Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that...

Foxit PDF Software Company Suffers Data Breach—Asks Users to Reset Password

If you have an online account with Foxit Software, you need to reset your account password immediately—as an unknown attacker has compromised your personal data and log-in credentials. Foxit Software, a company known for its popular lightweight Foxit PDF Reader and PhantomPDF applications being...

CVE-2019-3486

Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1...

Cross site scripting

Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1...

CVE-2019-3486

CVE-2019-3486 affects Micro Focus ArcSight Security Management Center (ArcMC). A stored cross-site scripting vulnerability stems from insufficient validation of client-side data in the WEB application, leading to potential client-side code execution in ArcMC versions prior to 2.9.1. The affected ...

Arbitrary File Download Vulnerability in Isthmus Electronic Document Security Management System (CNVD-2019-27482)

Electronic document security management system abbreviation: CDG is an electronic document security protection software. An arbitrary file read vulnerability exists in the IZP Electronic Document Security Management System. The download function somewhere in Yisetong Electronic Document Security...

CVE-2019-3414

All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security management to obtain the resources of the specified operation code owned by a user, the malicious script code could be transmitted in the parameter. If the front...

CVE-2019-3414

CVE-2019-3414 affects ZTE OTCP before 1.19.20.02, with an XSS vulnerability exploitable when a attacker uses security management to access resources tied to a user’s operation code. The malicious script can be transmitted in the parameter and, if the frontend fails to properly handle the interfac...

CVE-2019-3414

All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security management to obtain the resources of the specified operation code owned by a user, the malicious script code could be transmitted in the parameter. If the front...

Engage Your Management with the Definitive 'Security for Management' Presentation Template

In every organization, there is a person who's directly accountable for cybersecurity. The name of the role varies per the organization's size and maturity – CISO, CIO, and Director of IT are just a few common examples – but the responsibility is similar in all places. They're the person who...