4 Cybersecurity Principles That Withstand the Test of Time

Information security can be a noisy place. I’ve been a “security guy” my entire career and have been lucky enough to have a wide range of experiences: software development, IT security in a very large enterprise, vulnerability research and exploitation, and now as an enterprise software vendor...

Partner Perspectives: Using Cb Response to Mitigate ETERNALBLUE

Editor's Note: This post originally appeared on redcanary.com In case you’ve been under a rock, there’s a wee problem with ransomware, fueled by the public release of a handful of high quality access exploit and persistence backdoor utilities. Most recently, these have manifested in the form of t...

Protect Your Organization from Petya / NotPetya Ransomware with Carbon Black

Organizations from Russia to Britain were hit by a ransomware attack on Tuesday in a hack with similarities to the recent WannaCry attacks. Initial analysis showed that the malware seen is a recent variant of the Petya ransomware family based upon how it encrypts files and displays its ransom not...

CVE-2016-8440

Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android. Versions: Kernel 3.18. Android ID: A-31625306. References: QC-CR1036747...

CB Radio Chat - for friends! - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CB Radio Chat - for friends! published at the 'play' market has multiple vulnerabilities...

PT-2014-8918

Name of the Vulnerable Software and Affected Versions UnRTF affected versions not specified Description The issue allows remote attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. This can be triggered by a file containing a...

CVE-2014-9274: Improper Restriction of Operations within the Bounds of a Memory Buffer

UnRTF allows remote attackers to cause a denial of service crash and possibly execute arbitrary code as demonstrated by a file containing the string "\cb-999999999"...

CVE-2014-7793

The CVE-2014-7793 entry refers to the Android app CB - Calciatori Brutti (com.calciatori.brutti) 1.0, which does not verify X.509 certificates when connecting to SSL servers. This lack of certificate validation can allow man-in-the-middle attackers to spoof servers and obtain sensitive informatio...

CVE-2014-7793: Undefined Security Weakness

The CB - Calciatori Brutti aka com.calciatori.brutti application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Joomla CB Resume Builder - SQL Injection

No description provided by source. / Joomla Component comcbresumebuilder Remote SQL injection vulnerability - groupid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 5, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information +...

Joomla! CB Resume Builder 'group_id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiti...

PYSEC-2014-63

1 cbdecode.py and 2 linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service resource consumption via a large zip archive, which is expanded decompressed...

PT-2014-2762

Name of the Vulnerable Software and Affected Versions Plone versions 2.1 through 4.1 Plone versions 4.2.x through 4.2.5 Plone versions 4.3.x through 4.3.1 Description The issue allows remote authenticated users to cause a denial of service due to resource consumption. This occurs when a large zip...

CVE-2013-1568

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 5.3.3, 6.0.1, and 6.2.0 allows remote authenticated users to affect availability via unknown vectors related to CB...

CVE-2013-1568: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 5.3.3, 6.0.1, and 6.2.0 allows remote authenticated users to affect availability via unknown vectors related to CB...

PT-2012-4225

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 0.6.22 Description The issue is related to the user change icon file authorized cb function in /usr/libexec/accounts-daemon, which does not properly check the UID when copying an icon file to the system cache...

NCH Officeintercom 5.20 - Remote Denial of Service

NCH Officeintercom 5.20 - Remote Denial of Service !/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service Vulnerability Date: 11/24/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link:...

Joomla Component com_soundset LFI Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component comsoundset LFI Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Insufficient Anti-automation vulnerability in CB Captcha for Joomla and Mambo

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в плагине CB Captcha plugcbcaptcha для компонента Community Builder comcomprofiler для Joomla и Mambo. Данный плагин базируется на скрипте капчи CaptchaSecurityImages.php и об уязвимостях в...

Sql injection

SQL injection vulnerability in the JoomlaCache CB Resume Builder comcbresumebuilder component for Joomla! allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a groupmembers action to index.php...