CVE-2018-10198

Removed by vendor...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15621)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the customer portal register method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute system commands via specially crafted...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15620)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the customer portal changeManageBtn method in Quest DR Series disk backup software before 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'action' paramet...

Ticketfly website hacked & offline after hacker leaks customer data

By Carolina Eventbrite-owned San Francisco, California based ticket distribution service Ticketfly's website This is a post from HackRead.com Read the original post: Ticketfly website hacked & offline after hacker leaks customer data...

CVE-2018-5525

A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potentially sensitive...

Unspecified Cross-Site Scripting Vulnerability in SAP Customer Relationship Management Mail Form Editor

SAP Customer Relationship Management is a customer relationship management solution from SAP, Germany. It supports all customer-centric business areas, from marketing to sales and service, as well as customer interaction channels such as interaction centers, the Internet and mobile customers. An...

Amazon Comes Under Fire for Facial Recognition Platform

Facial-recognition technology has long been touted as a useful tool for law enforcement, but the ability of systems like Amazon’s Rekognition platform to identify large numbers of people at once in a single video or still frame has raised the hackles of privacy advocates. The American Civil...

Comcast Patches Router Bug That Leaked Some Wi-Fi Passwords

Comcast patched a bug Monday that under certain conditions leaked customer SSID names and passwords of Xfinity routers. The flaw was accessible via the Comcast website used by customers to activate and manage their Xfinity router. The bug did not affect Comcast customers that used their own priva...

Riccardo Di Blasio joins Wallarm as an advisor

We are excited to welcome Riccardo Di Blasio to Wallarm advisory team. Riccardo is a well known industry executive who brings his experience running go-to-market operations and managing business worldwide for large internationals like EMC Corp and VMware, including RSA Security. Riccardo’s...

The final compliance countdown: Are you ready for GDPR?

On May 25, the General Data Protection Regulation GDPR will replace the Data Protection Directive as the new standard on data privacy for all organizations that do business with European Union EU citizens.1When GDPR goes into effect, government agencies and organizations that control, maintain, o...

Oracle Siebel CRM Siebel Core - Server Framework Component Information Disclosure Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the server framework component...

Threat Outbreak Alert RuleID32660: Email Messages Distributing Malicious Software on May 2, 2018

Medium Alert ID: 57708 First Published: 2018 May 2 21:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32660 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID32644: Email Messages Distributing Malicious Software on May 2, 2018

Medium Alert ID: 57715 First Published: 2018 May 2 20:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32644 may contain the following files: Name | Size ...

State-of-the-art Security: The role of technology in the journey to GDPR compliance

As we’ve discussed over the last 7 weeks in our video case study series, the General Data Protection Regulation GDPR impacts many different areas of our company, including our employees, customers, and partners. The GDPR also mandates the use of state-of-the-art security, which, as a leader in...

Customer data & marketing operations: Keeping your data safe on the journey to GDPR compliance

Emails. Web forms. Events. Oh my! These marketing tactics are all designed to gather, store, and evolve relationships with your prospects, customers, and partners. Often times, they are the first point of contact for your organization from the outside world—and they all feed into your marketing...

Threat Outbreak Alert RuleID32553: Email Messages Distributing Malicious Software on April 24, 2018

Medium Alert ID: 57570 First Published: 2018 April 24 18:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32553 may contain the following files: Name | Si...

Carbon Black’s Commitment to GDPR & Keeping Customer Data Safe

At Carbon Black, keeping our customers’ data safe is a top priority. The European Union’s General Data Protection Regulation “GDPR”, a comprehensive European privacy law that takes effect on May 25, 2018, has shined a light on the importance of securing personal data. The GDPR is designed to...

Uber Rival Careem Hacked, 14 million customer & driver data stolen

By Waqas The United Arab Emirates-based ride-hailing giant Careem has been hacked. This is a post from HackRead.com Read the original post: Uber Rival Careem Hacked, 14 million customer & driver data stolen...

Code injection

PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...

CVE-2018-5190

PicturesPro Photo Cart 6 and 7 prior to Security-Patch-2018-B are vulnerable to an unauthenticated remote access flaw: an attacker can obtain arbitrary customer accounts by modifying cookies related to pc_head.php, pc_login.php, and pc_login_page.php. The issue is documented in CVE-2018-5190 and ...