Gone Phishing For The Holidays

Written by Or Katz and Amiram Cohen Overview: While our team, Akamai's Enterprise Threat Protector Security Research Team, monitored internet traffic throughout the 2017 holiday season, we spotted a wide-spread phishing campaign targeting users through an advertising tactic. During the six week...

gOSINT - Open Source Intelligence Framework

gOSINT is a small OSINT framework in golang, it's actually in development and still not ready for production if you want, feel free to contribute! What gOSINT can do Find mails from git repository Find Dumps for mail address Search for mail address linked to domain/mail address in PGP keyring...

PHP Code Execution Vulnerability in JCCMS of Chengdu Torch Cheng Information Technology Co.

JCCMS is a website building system developed by Chengdu Torch Cheng Information Technology Co. JCCMS has a code execution vulnerability that can be exploited by attackers to execute arbitrary PHP code...

BA SYSTEMS BAS Web Information Disclosure Vulnerability in BAS920 and ISC2000 Devices

BAS920 and ISC2000 devices are both programmable intelligent controller products from BA SYSTEMS of Denmark.BA SYSTEMS BAS Web is a building automation system that runs on them. An access control error vulnerability exists in BA SYSTEMS BAS Web on BAS920 and ISC2000 devices using firmware version...

Building Automation Systems BAS-Device Web Detection

Detection of running version of Building Automation System device. This script sends an HTTP GET request and tries to ensure the presence of Building Automation System devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Nanchang Chishuo Network Technology Co., Ltd. network station building system with SQL injection vulnerability

Nanchang Chishuo Network Technology Co., Ltd. is a collection of website construction, mobile site construction, micro letter public platform development as one of the companies. There is a SQL injection vulnerability in Nanchang Chishuo Network Technology Limited's web site building system. An...

SQL Injection Vulnerability in Website Building System of Suzhou Leyi Network Technology Co.

Suzhou Leyi Network Technology Co., Ltd. is a network company specializing in enterprise website construction and e-commerce services, providing network promotion and marketing in one of the professional services. Suzhou Leyi Network Technology Co., Ltd. website building system SQL injection...

difuze - Fuzzer for Linux Kernel Drivers

Fuzzer for Linux Kernel Drivers Tested on Ubuntu = 14.04.5 LTS As explained in our paper, There are two main components of difuze: Interface Recovery and Fuzzing Engine 1. Interface Recovery The Interface recovery mechanism is based on LLVM analysis passes. Every step of interface recovery are...

Shaanxi Public Software Co., Ltd. website building system has SQL injection vulnerabilities in multiple parameters

Ltd. has been focusing on the promotion and application of industry informatization construction and management technology, and is a modern high-tech enterprise integrating industry informatization system, development of professional software and technical training service. Shaanxi public softwar...

Henan Zhongyu Network Technology Co., Ltd. station building system multiple parameters exist SQL injection vulnerability

Henan Zhongyu Network Technology Co., Ltd. is a high-tech company that provides informatization and networking solutions for enterprises, government agencies and individuals. Henan Zhongyu Network Technology Co., Ltd. station-building system has SQL injection vulnerabilities in a number of...

SQL injection vulnerability in program\diypage\receive\add.php page of Dreamline Monxin Enterprise Building System program\diypage\receive\add.php

Monxin Enterprise Station Building System is a self-service station building system based on PHP language development. A SQL injection vulnerability exists in the program\diypage\receive\add.php page of the Monxin Enterprise Station Building System. The vulnerability is due to the system's failur...

SQL Injection Vulnerability in ShowNews.asp Page of Zhongkai Information Website Building System

Zhongkai Information Network Co., Ltd. is to provide a full range of one-stop e-commerce solutions for traditional and emerging enterprises. A SQL injection vulnerability exists in the ShowNews.asp page of CKI's website builder system. The vulnerability is caused due to the system's failure to...

SQL Injection Vulnerability in Website Building System of Zhongshan NetLink Information Technology Co.

NetLink provides a series of Internet solutions for customers: including website construction, brand image design, Internet software development and application solutions, network promotion and other services. Zhongshan NetLink Information Technology Co., Ltd. website building system has SQL...

fatcat - FAT Filesystems Explore, Extract, Repair, And Forensic Tool

This tool is designed to manipulate FAT filesystems, in order to explore, extract, repair, recover and forensic them. It currently supports FAT12, FAT16 and FAT32. Tutorials & examples Building and installing You can build fatcat this way: mkdir build cd build cmake .. make And then install it:...

SQL Injection Vulnerability in DM Enterprise Building System v201710

DM building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system v201710 login at the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain...

Siemens BACnet Field Panels Directory Traversal Vulnerability

BACnet Building Automation Control Network is a data communication protocol for building automation and control networks. A directory traversal vulnerability exists in Siemens BACnet Field Panels. This allows a remote attacker with network access to an integrated web server ports 80/TCP and 443/T...

Siemens BACnet Field Panels Security Bypass Vulnerability

BACnet Building Automation Control Network is a data communication protocol for building automation and control networks. A security bypass vulnerability exists in Siemens BACnet Field Panels, where an attacker with network access to an integrated web server ports 80/TCP and 443 /TCP could bypass...

CVE-2017-1000112

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSGMORE ipappenddata calls ipufoappenddata to append. However in between two send calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In...

Shaanxi Knight Technology Development Co., Ltd. enterprise station building system has SQL injection vulnerability

Ltd. is a website design company with website construction and visual design development and brand online marketing promotion. Ltd. corporate website building system suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Why ArtsSEC decided to partner with Wallarm

by Maximiliano Soler, @maxisoler by Maximiliano Soller, CTO of ArtsSEC The greatest thing with partnerships is how well the organisations’ expertise complement each other. Our partnership with Wallarm has incredibly exceeded our expectations in their innovation and expertise in web application...