PT-2025-23094 · Ооо 'Симпл 1' · Simpleone Itsm

Уязвимость системы автоматизации IT-процессов SimpleOne ITSM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, выполнить произвольный код...

UBUNTU-CVE-2024-27914

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if...

Directory Traversal Vulnerability in the Training Platform of Shenzhen Sigma Data Technology Co.

Shenzhen Sigma Data Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. Shenzhen Sigma Data Technology Co., Ltd. practical training teaching platform to fish with the party there is a directory traversal vulnerability, an attacker can use...

Unauthorized Access Vulnerability in Sichuan E-Rite Technology Co.

Ltd. was registered in Sichuan Province on 2010-06-04, belongs to the software and information technology services industry, the main industry for the software and information technology services industry and so on. Sichuan E-Rite Technology Co., Ltd. building system there is an unauthorized acce...

SQL Injection Vulnerability in zh***.asp Page of Website Building System of Beijing Natural Sound Technology Service Co.

Natural Sounds is a hearing rehabilitation business that addresses hearing loss for hearing patients. There is a SQL injection vulnerability in the zh.asp page of the website builder system of Beijing Natural Voice Technology Service Limited Liability Company, through which an attacker can obtain...

Excerpts from Modern Bank Heists – Threat Hunting Teams & CIR

Carbon Black recently published a report on the newest threats facing the financial world, and how to counteract them. For more information about how Cb Defense, Carbon Black's NGAV + EDR solution, helps enterprises address their endpoint security challenges, check out our weekly Cb Defense Live...

Modern Bank Heists: Cybersecurity Threats Facing the Financial Sector

Despite investing heavily in security, financial institutions continue to experience cyber attacks at a rapid pace. Conducted primarily for the purpose of yielding illicit financial gain, cyber attacks against the financial services industry are increasing in sophistication and are often...

The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management allows attackers to bypass authentication procedures and arbitrarily delete or upload files.

The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass...