Unauthorized Access Vulnerability in Yuexun Smart Education Cloud Platform (CNVD-2020-59801)

Yuexun Smart Education Platform is an educational software. Unauthorized access vulnerability exists in Yuexun Intelligent Education Cloud Platform. An attacker can use the vulnerability to overstep the authority to manage all personnel accounts and obtain sensitive information by modifying other...

Huawei FusionAccess Command Execution Vulnerability

Huawei FusionAccess is a virtual desktop application based on Huawei Cloud Platform from Huawei, China. A security vulnerability exists in Huawei FusionAccess version 6.5.1. The vulnerability stems from a command being authorized with incorrect privileges. An attacker could exploit the...

Integrate Security into Your GCP with Google Cloud SDK

Dive into this how to guide on integrating Trend Micro Cloud One™ – Workload Security with Google Cloud Platform™...

What's New in Edge Delivery

Welcome to day two of the Akamai Platform Update! Today, we're focusing on Akamai's edge delivery products as well as other complimentary products that help drive great digital experiences. The last several months have been nothing short of unprecedented as lockdowns, quarantines, and other...

PAN-OS Critical Buffer Overflow Vulnerability (CVE-2020-2040) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®

On Sept 9, 2020, Palo Alto Networks published nine security bulletins addressing vulnerabilities in PAN-OS operating system versions 8.0 or later. One of the nine CVEs released, CVE-2020-2040, received a critical severity rating score of 9.8 based on the CVSS v3 Scoring system. PAN-OS devices are...

VPS-Docker-For-Pentest - Create A VPS On Google Cloud Platform Or Digital Ocean Easily With The Docker For Pentest

Create a VPS on Google Cloud Platform or Digital Ocean easily with the docker for pentest included to launch the assessment to the target. Requirements Terraform installed Ansible installed SSH private and public keys Google Cloud Platform or Digital Ocean account. Usage 1.- Clone the repository...

Information Leakage Vulnerability in Aicloud Education Cloud Platform of Tianwen Digital Media Technology (Beijing) Co.

AiCloud education cloud platform is a system that meets the needs of education informatization 2.0 era construction in the mode of "platform+application+resources+services", and is constructed in five aspects, namely, intelligent management, intelligent teaching, intelligent teaching and research...

USN-4485-1: Linux kernel vulnerabilities

Timothy Michaud discovered that the i915 graphics driver in the Linux kernel did not properly validate user memory locations for the i915gemexecbuffer2ioctl. A local attacker could possibly use this to cause a denial of service or execute arbitrary code. CVE-2018-20669 It was discovered that the...

Join us at Black Hat USA 2020!

Qualys is excited to present two sponsored sessions at the Black Hat USA 2020 virtual event, open to all attendees with the free Business Hall pass. Register or log in to Black Hat USA 2020, and then view and register for these free sessions. Join us to learn about our new multi-vector EDR soluti...

USN-4426-1: Linux kernel vulnerabilities

Jason A. Donenfeld discovered that the ACPI implementation in the Linux kernel did not properly restrict loading SSDT code from an EFI variable. A privileged attacker could use this to bypass Secure Boot lockdown restrictions and execute arbitrary code in the kernel. CVE-2019-20908 Fan Yang...

Shenzhen RuiTao Information Technology Co., Ltd. RuiTao Education Cloud Resource Management Platform Has Logic Flaw Vulnerability

Ltd. was founded in 2003, headquartered in Shenzhen Nanshan District National Science and Technology Park, RuiTao puts forward the new concept of "scene recording and broadcasting", so that the recording and broadcasting into the wireless portable era. Shenzhen RuiTao Information Technology Co.,...

SQL Injection Vulnerability in Psychological Cloud Platform of Heart Rise Era (Beijing) Science and Education Instrument Co.

Heart Rise Era Beijing Science and Education Instrument Co. There is a SQL injection vulnerability in the psychological cloud platform of Heart Rise Era Beijing Science and Education Instrument Co. An attacker can use the vulnerability to obtain sensitive information from the database...

Logic Flaw Vulnerability in Mingniu Cloud Platform

Mingniu Cloud Platform is an industrial-grade cloud platform based on WEB architecture A logic flaw vulnerability exists in the Mingniu Cloud Platform, which can be exploited by an attacker to modify any user's password...

Making Azure Sentinel work for you

Microsoft Azure Sentinel is the first Security Incident and Event Management SIEM solution built into a major public cloud platform that delivers intelligent security analytics across enterprise environments and offers automatic scalability to meet changing needs. This new white paper outlines be...

Hacking smart devices to convince dementia sufferers to overdose

Weve looked at numerous smart tracker watches over recent years. All had some disastrous security flaws. However, we found one recently that was a little different: it was aimed at the elderly, particularly those with dementia or other cognitive impairments. If the wearer goes for a walk and...

USN-4404-2: Linux kernel vulnerabilities

USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules. Original advisory details: Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when...

Google Cloud Platform guest-oslogin elevation of privilege vulnerability (CNVD-2020-60516)

Google Cloud Platform is a cloud computing platform that provides cloud computing, data storage, data analytics and machine learning services. guest-oslogin is one of the operating system login components. A security vulnerability exists in guest-oslogin versions 20190304 through 20200507 in Goog...

Google Cloud Platform guest-oslogin elevation of privilege vulnerability (CNVD-2020-60515)

Google Cloud Platform is a cloud computing platform that provides cloud computing, data storage, data analytics and machine learning services. guest-oslogin is one of the operating system login components. A security vulnerability exists in guest-oslogin versions 20190304 through 20200507 in Goog...

Google Cloud Platform guest-oslogin elevation of privilege vulnerability

Google Cloud Platform is a cloud computing platform that provides cloud computing, data storage, data analytics and machine learning services. guest-oslogin is one of the operating system login components. A security vulnerability exists in guest-oslogin versions 20190304 through 20200507 in Goog...

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...