Logic Flaw Vulnerability in DSS System of Zhejiang Dahua Technology Co.

DSS system of Zhejiang Dahua Technology Co., Ltd. is a comprehensive management platform that integrates the management functions of the four major security subsystems: video, alarm, access control and intercom. The DSS system of Zhejiang Dahua Technology Co., Ltd. suffers from a logic flaw...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01866)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01865)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2020-75025)

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A SQL injection vulnerability exists in the DSS Safe Ci...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2020-75024)

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A SQL injection vulnerability exists in the DSS Safe Ci...

Using Akamai Edge DNS with PCI DSS Environments

Overview The PCI DSS scoping guidance indicates that common shared services that provide services to the CDE, such as DNS, can be in scope and must be assessed for PCI DSS compliance. This post discusses the application of this scoping guidance to the external authoritative DNS servers and provid...

openGauss: Configuring the SSL Encryption Algorithm

sslciphers specifies the SSL encryption algorithms used for secure connections. openGauss supports the following algorithms: - DHE-RSA-AES256-GCM-SHA384 - DHE-RSA-AES128-GCM-SHA256 - DHE-DSS-AES256-GCM-SHA384 - DHE-DSS-AES128-GCM-SHA256 - DHE-RSA-AES256-SHA256 - DHE-RSA-AES128-SHA256 -...

Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak

A widely used hotel reservation platform has exposed 10 million files related to guests at various hotels around the world, thanks to a misconfigured Amazon Web Services S3 bucket. The records include sensitive data, including credit-card details. Prestige Software’s “Cloud Hospitality” is used b...

How to Be Resilient to Data Theft

Page Integrity Manager is now PCI compliant -- a strong starting point to harden your web applications. Compliance with the Payment Card Industry Data Security Standard PCI DSS is fundamental for any business that accepts payment cards or processes payment card data. Many financial services...

PCI DSS version 4.0 – what we know so far

From September 23 - November 13, 2020, stakeholders can participate in the Request for Comments RFC on the draft of PCI Data Security Standard DSS version 4.0. This is the second RFC for the PCI DSS v4.0 draft--the first RFC was in late 2019 and that feedback was incorporated into the draft...

Fintech industry developments, differences between Europe and the US

“Put your money in the bank and you can watch it grow.” If there is a statement that shows us how much the financial world has changed it’s this one. With the introduction of negative interest, companies and consumers with a large amount of liquid assets are looking for a different way to handle...

Report: 97% of Cybersecurity Companies Have Leaked Data on the Dark Web

In a new report into the global cybersecurity industry's exposure on the Dark Web this year, global application security company, ImmuniWeb, uncovered that 97% of leading cybersecurity companies have data leaks or other security incidents exposed on the Dark Web, while on average, there are over...

CVE-2020-8817

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

CVE-2020-8817

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

Design/Logic Flaw

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

CVE-2020-8817

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

CVE-2020-8817

CVE-2020-8817 affects Dataiku DSS prior to 6.0.5. The issue lets an attacker with access to a project modify the project’s Created by metadata (write access to the project). CVSS vectors indicate high impact for confidentiality and integrity (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N; base 8.1). No exp...

PT-2020-20300

Name of the Vulnerable Software and Affected Versions Dataiku DSS versions prior to 6.0.5 Description The issue allows attackers to gain write access to a project, enabling them to modify the Created by metadata. Recommendations For versions prior to 6.0.5, update to version 6.0.5 or later to...

CVE-2020-8817: Undefined Security Weakness

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

Top Security and Data Privacy Regulations for Financial Services

Regulatory compliance has become an increasingly more important part of the financial services industry in recent years. And it’s a trend that’s likely to continue due to the upsurge in cloud computing, the use of mobile applications, and a shift to IoT devices, all of which are driving exponenti...