Empower your Cloud Ops Teams – Publish Qualys CloudView Security Assessment Reports to their Slack Channel

In today’s constantly changing and evolving cloud environments, being able to quickly provide information on misconfigurations and security policy violations in your cloud accounts and assets has become a critical need to the success of your security operations. Many cloud platforms offer tools...

The Best Way to Install and Set-Up WinRAR 64-bit

By Owais Sultan WinRAR is a file archiving tool for handling ZIP and RAR files on computers. It is also available for several different platforms including Windows, Mac, Linux, Android and lots more. This is a post from HackRead.com Read the original post: The Best Way to Install and Set-Up WinRA...

Philips iSite PACS and IntelliSpace PACS Access Bypass Vulnerability

Philips iSite PACS and IntelliSpace PACS are both radiology image management systems for the healthcare industry from Philips in the Netherlands. An access bypass vulnerability exists in Philips iSite PACS and IntelliSpace PACS, which could be exploited by an attacker to compromise components of...

A week in security (August 20 – August 26)

Last week on Labs, we took a look at insider threats, doubled back on the privacy of search browser extensions, profiled green card scams, revisited Defcon badgelife, and talked about what happens to a user's accounts when they die. Other cybersecurity news There was an archiving error in Twitch...

[SECURITY] Fedora 28 Update: star-1.5.3-12.fc28

Star saves many files together into a single tape or disk archive, and can restore individual files from the archive. Star supports ACL...

The vulnerability of the NVBUBackup request handler’s software for data archiving and restoration by NetVault Backup allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUBackup request handler in software for data archiving and restoration by NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NVBUBackup JobList processing component in the NetVault Backup software for data archiving and restoration allows a attacker to execute arbitrary code.

The vulnerability of the NVBUBackup JobList processing component in NetVault Backup software for data archiving and restoration is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the request handler of the NVBUSourceDeviceSet Get function in the software for data archiving and restoration by NetVault Backup allows a attacker to execute arbitrary code.

The vulnerability of the NVBUSourceDeviceSet Get request handler in software for data archiving and restoration in NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

GE Centricity PACS RA1000 Authentication Bypass Vulnerability

GE Centricity PACS RA1000 is a General Electric GE image delivery and archiving system for the healthcare industry. An authentication bypass vulnerability exists in the GE Centricity PACS RA1000 that stems from the device using default credentials or hard-coded credentials. A remote attacker coul...

Cisco Web Security Appliance Advanced Malware Protection File Bypass Vulnerability

A vulnerability in the Advanced Malware Protection AMP file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass a configured AMP file filtering rule. The file types affected are zipped or archived file types. T...

Apache Pony Mail Security Bypass Vulnerability

Apache Pony Mail is a plugin with mail archiving, viewing and interaction features. A security vulnerability exists in Apache Pony Mail that allows an attacker to submit special requests to bypass authentication...

SAP NetWeaver Portal Cross-Site Scripting Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications.SAP NetWeaver Portal is a portal solution that provides single sign-on information for authentication via a Web browser. A cross-site scripting...

CVE-2017-11460

Cross-site scripting XSS vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shpresult.jsp, aka SAP Security Note 2308535...

PAX Linux Security Bypass Vulnerability

pax is a set of archiving tools developed by Debian's QA group that can read and write tar and cpio formats. A security bypass vulnerability exists in PAX Linux. A remote attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...

April 18, 2017—KB4015553 (Preview of Monthly Rollup)

None None...

SQL Injection Vulnerability in Image Archiving and Transmission System of Infidel Software (Shanghai) Co.

Infidel Software Shanghai Co., Ltd. image archiving and transmission system is a set of software about medical image archiving and transmission. An SQL injection vulnerability exists in the Image Archiving and Transfer System of Infinera Software Shanghai Co. Ltd, which can be exploited by an...

The vulnerability of the SAP NetWeaver software integration platform allows attackers to obtain confidential information, enhance their privileges, or carry out other malicious actions.

The vulnerability of the XML Data Archiving Service component of the SAP NetWeaver software integration platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to obtain confidential information, enhance their privileges, or cause other adverse...

CVE-2015-8840

The XML Data Archiving Service XML DAS in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive information, gain privileges, or possibly have unspecified other impact via requests to 1 webcontent/cas/casenter.jsp, 2...

CVE-2015-8840

The XML Data Archiving Service XML DAS in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive information, gain privileges, or possibly have unspecified other impact via requests to 1 webcontent/cas/casenter.jsp, 2...

The vulnerability of the Spio archiving tool, which allows a perpetrator to trigger a service failure

The vulnerability of the cpiosafernamesuffix function in the Spio archiving utility is caused by buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory spill through the use of a specially created CPIO file...