Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...

Terahertz Millimeter-Wave Scanners

Interesting article on terahertz millimeter-wave scanners and their uses to detect terrorist bombers. The heart of the device is a block of electronics about the size of a 1990s tower personal computer. It comes housed in a musician's black case, akin to the one Spinal Tap might use on tour. At t...

Authentication flaw

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

CVE-2018-17938

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

CVE-2018-17938

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

CVE-2018-17938

CVE-2018-17938 affects Zimbra Collaboration Server prior to 8.8.10 GA, where a loginErrorCode value can cause text content spoofing. The vulnerability is tied to the login error handling logic, enabling spoofed content in responses. The affected component is Zimbra Collaboration (server) before t...

CVE-2018-17938

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

CVE-2018-17938

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

PT-2018-14286

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.10 GA Description The issue allows text content spoofing via a loginErrorCode value. Recommendations For versions prior to 8.8.10 GA, update to version 8.8.10 GA or later to resolve the issue...

PT-2018-1972

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning affected versions not specified Description The issue is related to the use of pre-installed credentials in the Cisco Prime Collaboration Provisioning component. This could allow a remote attacker to gain...

CVE-2018-17938: Insufficient Verification of Data Authenticity

Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value...

Cybersecurity Awareness Month: Bridging the Cybersecurity Skills Gap

Pumpkins, football, and cooler weather are three big indicators that it’s officially October. But, the most near and dear benchmark to my heart is that it’s National Cybersecurity Awareness Month NCSAM 2018. In its 15th year, NCASM is as an annual initiative to raise awareness about the importanc...

Collaborate securely

This is a blog series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out Protecting user identities, the...

Imperva Joins Global Cybersecurity Tech Accord

Imperva is dedicated to the global fight to keep people's data and applications safe from cybercriminals. What this means for our Imperva Threat Research team is that we spend a lot of time researching new cyber attacks, creating mitigations and writing powerful software. We believe that nothing...

Hackers behind Mirai botnet to avoid jail for working with the FBI

By Waqas Mirai has been known as one of the most powerful botnets comprised of millions of hacked Internet of Things IoT devices including routers, digital video recorders DVRs and security cameras. Mirai was also used by hackers to carry out one of the largest DDoS attacks on the servers of DynD...

Command Execution Vulnerability in IBOS Enterprise Collaboration Software Version 4.5.4

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A command execution vulnerability exists in IBOS Enterprise Collaboration Management Software version 4.5.4. Allows an attacker to remotely execute commands and gain server privileges...

Microsoft and Imperva Collaboration Bolsters Data Compliance and Security Capabilities

This article explains how Imperva SecureSphere V13.2 has leveraged the latest Microsoft EventHub enhancements to help customers maintain compliance and security controls as regulated or sensitive data is migrated to Azure SQL database instances. Database as a Service Benefits Platform as a Servic...

The vulnerability of the password-changing function of the Cisco Prime Collaboration Provisioning software for centralized management of Cisco products allows a hacker to trigger a service failure.

The vulnerability of the password-changing function of the Cisco Prime Collaboration Provisioning PCP software for centralized product management involves an authentication error. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MobSF (Mobile Security Framework) v1.0 - Mobile (Android/iOS) Automated Pen-Testing Framework

Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing framework capable of performing static, dynamic and malware analysis. It can be used for effective and fast security analysis of Android, iOS and Windows mobile applications and support...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CNVD-2018-18753)

Cisco Prime Collaboration Assurance PCA is the United States Cisco Cisco a set of enterprise collaboration network management solutions. The program supports a unified management console to simplify the management of unified communications and video collaboration network, as well as rapid...