909 matches found
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
Vulnerability Details fofa： title="BIG-IP" || i...
The vulnerability of the SCADA system EisBaer, related to the disclosure of information, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the SCADA system of EisBaer is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Amazon Linux 2 : pki-core (ALAS-2023-2304)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2304 advisory. A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the...
The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from improper processing of output data for registration logs, allowing a intruder to execute arbitrary code.
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user...
The vulnerability of the SCADA system SCADA Data Gateway (SDG), related to the disclosure of information, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the SCADA system, SCADA Data Gateway SDG, is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
PT-2023-28278 · Magnet Forensics · Magnet Forensics Axiom
Name of the Vulnerable Software and Affected Versions: Magnet Forensics AXIOM affected versions not specified Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit th...
SoundThinking, Maker of ShotSpotter, Is Buying Parts of PredPol Creator Geolitica
SoundThinking is purchasing parts of Geolitica, the company that created PredPol. Experts say the acquisition marks a new era of companies dictating how police operate...
The vulnerability of the get_config component of the data exchange software between SCADA systems, such as Triangle MicroWorks SCADA Data Gateway (SDG), allows a intruder to bypass security restrictions and gain unauthorized access to the system.
The vulnerability of the getconfig component of the data exchange software between SCADA systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows an intruder to bypass security restrictions and gain unauthorized access to the system...
Results of Major Technical Investigations for Storm-0558 Key Acquisition
March 12, 2024 update As part of our continued commitment to transparency and trust outlined in Microsoft’s Secure Future Initiative, we are providing further information as it relates to our ongoing investigation. This new information does not change the customer guidance we previously shared, n...
A week in security (August 21 - August 27)
Last week on Malwarebytes Labs: Teenage members of Lapsus$ ransomware gang convicted Update now! Google Chrome's first weekly update has arrived Smart lightbulb and app vulnerability puts your Wi-Fi password at risk Malwarebytes acquires Cyrus Security Ivanti Sentry critical vulnerability--don't...
CVE-2023-39519 CloudExplorer Lite sensitive information leakage vulnerability
Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in the user information acquisition of CloudExplorer Lite. The vulnerability has been fixed in version 1.4.0...
Malwarebytes acquires Cyrus Security
Today, I am absolutely thrilled to share some exciting news: Malwarebytes is officially welcoming Cyrus Security into our family. This acquisition signifies an exciting chapter in our journey, and I wanted to share why this development is so special, and what it means for the millions who trust...
MOXA NPort IAW5000A-I/O Series Hard-Coded Credential Vulnerability
MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, China. The server enables the integration of field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. A hard-coded...
Triangle MicroWorks SCADA Data Gateway File Upload Vulnerability
Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product developed by Triangle MicroWorks, Inc. and is mainly used for data acquisition and monitoring in industrial automation control systems. A file upload vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which stems...
Poorly Purged Medical Devices Present Security Concerns After Sale on Secondary Market
In a post-pandemic landscape, the interconnectedness of cybersecurity is front and center. Few could say that they were not at least aware of, if not directly affected by, the downstream effects of major breaches that cause impacts felt across economies. One should look at disruptions in the glob...
CVE-2023-35342
Windows Image Acquisition Elevation of Privilege Vulnerability...
CVE-2023-35342
Windows Image Acquisition Elevation of Privilege Vulnerability...
CVE-2023-35342
Windows Image Acquisition Elevation of Privilege Vulnerability...
