CVE-2017-12368

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12370

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12360

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...

CVE-2017-12372

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

Denial of Service Vulnerability in Multiple Cisco Products (CNVD-2017-35721)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

Remote Code Execution Vulnerability in Multiple Cisco Products (CNVD-2017-35724)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

Boost productivity of your DevOps teams and deliver superior digital experiences with Akamai Cloud Delivery Platform - Part 3

In the first and second part of this blog series, we discussed the challenges associated with cloud adoption and how you can leverage Akamai Cloud Delivery Platform, the world's largest and most trusted cloud delivery platform, to achieve the scalability, availability, reliability, security and...

CloudBees Jenkins Delivery Pipeline Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins is the U.S. CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Delivery Pipeline Plugin is to use a continuo...

CVE-2017-2739

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle MITM can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications...

Customer-driven Rapid Innovation for Hybrid Cloud Security

Cyber threats have no boundaries; they come in new and evolving forms, capable of striking at any time … so it becomes important that your threat protection extends beyond conventional boundaries as well. In the past, on premise versions of security solutions were held up by long development cycl...

Amazon Promises Fix to Stop Key Service Hack

Researchers at Rhino Security Labs identified a flaw in Amazon’s Key delivery service and Cloud Cam security camera that allows a rogue courier to tamper with the camera and knock it offline, making it appear no one is entering home, when that’s not the case. Amazon Key service allows homeowners ...

Deserialization of untrusted data

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for 1 delivery drivers to freeze a camera and re-enter a house for unfilmed activities or 2 attackers to freeze a camera and enter a house if a delivery driver fail...

CVE-2017-16867

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for 1 delivery drivers to freeze a camera and re-enter a house for unfilmed activities or 2 attackers to freeze a camera and enter a house if a delivery driver fail...

CVE-2017-16867

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for 1 delivery drivers to freeze a camera and re-enter a house for unfilmed activities or 2 attackers to freeze a camera and enter a house if a delivery driver fail...

Threat Outbreak Alert RuleID31295: Email Messages Distributing Malicious Software on November 14, 2017

Medium Alert ID: 55917 First Published: 2017 November 14 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31295 may contain the following files: Name |...

How to Re-Enable Camera when it is Blocked by Restriction policy

How to Remove Restriction Policy from the iOS Devices without Re-enrolling. For Eg:- Customer has pushed the camera restriction policy to the Delivery Group to block the camera access for the users and now want to remove the unblock the camera to their end users by moving into other delivery grou...

Reduce cloud adoption risks and deliver superior digital experiences with Akamai Cloud Delivery Platform - Part 1

Businesses are rapidly moving to the cloud and a recent IDG survey indicates that 70% of businesses have at least 1 application in the cloud and 16% plan to take their first app to the cloud in the next 12 months. However public cloud providers present their own challenges. They are unreliable...

The vulnerability of the micro-programming software of the access control system for the virtual environment NetScaler Gateway, as well as the micro-programming software of the application delivery controller Citrix NetScaler Application Delivery Controller, allows a intruder to gain access to the NetScaler management interface.

The vulnerability of the microprogramming software of the access control system for the virtual environment NetScaler Gateway and the microprogramming software of the application delivery controller Citrix NetScaler Application Delivery Controller is related to deficiencies in access control...

Halloween Special: Inside a Hacker’s Mind During the Cyber “Kill Chain”

Editor's Note: This blog was originally produced by former Carbon Black Chief Security Strategist and Co-founder, Ben Johnson. In the spirit of Halloween, I’ve decided to demonstrate how a hacker might go after your company, via the full “kill chain.” Muhahaha! Ok, it may not be that scary or as...

FS Food Delivery Script - keywords SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FS Food Delivery Script - SQL Injection Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/food-delivery/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac...