207 matches found
Apache HTTP Server 'mod_perl' /perl-status accessible (HTTP)
Requesting the URI /perl-status provides a comprehensive overview of the server configuration. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...
Unauthorized Access Vulnerability in Network Video Surveillance System of Tianmai Technology
Tianmai Technology is a national high-tech enterprise focusing on the field of intelligent public transportation. The company's main business is to provide comprehensive solutions for urban bus operation, management and service based on Telematics technology. There is an unauthorized access...
Bad bots continue to evolve. Your mitigation strategy should, too.
With the global pandemic continuing to catalyze digitalization, we’ve seen two years worth of digital transformation take place in a mere two months, according to Microsoft CEO Satya Nadella. Clearly, bad actors are capitalizing on the opportunities that digital transformation creates, as more da...
Reinventing Cybersecurity Asset Management
Because security teams need their own asset inventory solution In conversations with our customers, it’s very clear that organizations need to establish a comprehensive view of their IT asset infrastructure because you can’t secure what you don’t know or can’t see. But that comprehensive view nee...
There is a file upload vulnerability in Tianzhi Smart Hospital Integrated Quality Supervision Platform
Shenzhen Qianhai Tianzhi Information Technology Co., Ltd. is a national high-tech enterprise which firstly focuses on the management of hospital grade evaluation and the informationization construction of hospital comprehensive quality supervision platform. A file upload vulnerability exists in t...
Task Force delivers strategic plan to address global ransomware problem
The Ransomware Task Force RTF, a think tank composed of more than 60 volunteer experts who represent organizations encompassing industries and governments, has recently pushed out a comprehensive and strategic plan for tackling the increasing threat and evolution of ransomware. The report, entitl...
Swiss Army knife For Information Security: What is Comprehensive Protection?
Written by Sergey Ozhegov, CEO of SearchInform In the early days of information security, we used to rely on antivirus and firewall in our arsenal. Once I even “caught” a leak with the help of the firewall logs: I noticed an atypically large data upload and found out that the user was uploading...
General Overview of Vulnerability Management
In a world where most companies take nearly six months to detect a data breach, establishing a comprehensive and continuous process for identifying, classifying, mitigating and preventing security vulnerabilities within an organization can help prevent current cybersecurity challenges...
Déjà vu-lnerability
A Year in Review of 0-days Exploited In-The-Wild in 2020 Posted by Maddie Stone, Project Zero 2020 was a year full of 0-day exploits. Many of the Internet’s most popular browsers had their moment in the spotlight. Memory corruption is still the name of the game and how the vast majority of detect...
R Cran Path Traversal Vulnerability
R Cran is a default package manager for the R programming language from the R Foundation. CRAN has a security vulnerability that can be exploited by an attacker to crash an application...
SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70835)
Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...
File upload vulnerability in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd (CNVD-2020-70800)
Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A file upload vulnerability exists in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to gain server...
2021 Detection and Response Planning, Part 2: Driving SOC Efficiency With a Detections-First Approach to SIEM
This is the second installment of our series around 2021 security planning. In part one, Rapid7 Detection and Response Practice Advisor Jeffrey Gardner offered tips and advice for ramping up annual security planning. In this installment, we’ll explore the importance of reliable and comprehensive...
CVE-2020-23829
interface/new/newcomprehensivesave.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image...
PT-2020-15587
Name of the Vulnerable Software and Affected Versions LibreHealth EHR version 2.0.0 Description The issue allows remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image through the interface/new/new comprehensive save.php file. This ...
SQL Injection Vulnerability in Livestock Comprehensive Management Information Platform of Xinjiang Uygur Autonomous Region Bureau of Animal Husbandry and Veterinary Medicine
The Bureau of Animal Husbandry and Veterinary Medicine of the Xinjiang Uygur Autonomous Region is responsible for the supervision and management of the animal husbandry industry, veterinary drugs and veterinary instruments industry, feed and forage industry, and livestock and poultry slaughtering...
mobilityonetransportation.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162912 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Microsoft Brings Defender Antivirus for Linux, Coming Soon for Android and iOS
Almost within a year after releasing Microsoft Defender Advanced Threat Protection ATP for macOS computers, Microsoft today announced a public preview of its antivirus software for various Linux distributions, including Ubuntu, RHEL, CentOS and Debian. If this news hasn't gotten you excited yet...
State & Local Governments: The Cyberinsurgency Spreads
Today’s world is dramatically different than even five years ago. Ransomware attacks, which used to make global headlines, are now commonplace. Cybercriminals—who have historically targeted large enterprises—are now also setting their sights on state and local governments. New, sophisticated...
suspanish.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8584 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting suspanish.com website and its users. Following coordinated...