Friday Squid Blogging: Searching for Giant Squid by Collecting Environmental DNA

The idea is to collect and analyze random DNA floating around the ocean, and using that to figure out where the giant squid are. No one is sure if this will actually work. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blo...

Mozilla Rust tiny_http crate environment issue vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An environmental issue vulnerability exists in tinyhttp crate in versions of Mozilla Rust prior to 2020-06-16, which stems from an HTTP request smuggling can occur via a misformatted transport encoding header. N...

Security Bulletin: Rational Synergy vulnerability (CVE-2014-0453, CVE-2014-0411)

Summary A possible security vulnerability has been reported in the Rational Synergy. There have been no reported exploits of this possible vulnerability, which is located in the JSSE component of IBM Java shipped with the tool and its agent. Vulnerability Details | Subscribe to My Notifications t...

SQL Injection Vulnerability in Pollutant Discharge Intelligent Control Platform of Hebei Baijing Environmental Technology Co.

Hebei Baijing Environmental Technology Co., Ltd. is located in Shijiazhuang High-tech Development Zone, is the ecological environment quality monitoring and control of series of products research and development, data services, integrated solution design of specialized high-tech enterprises. Hebe...

SQL Injection Vulnerability in Environmental Automatic Monitoring System of Jiangsu Sanxi Technology Co.

The business scope of Jiangsu Sanxi Technology Co., Ltd. includes: environmental monitoring and control systems, automation systems, information management systems, computers, communications, control systems, and other types of systems such as software and hardware development. Jiangsu Sanxi...

New Zealand Election Fraud

It seems that this election season has not gone without fraud. In New Zealand, a vote for "Bird of the Year" has been marred by fraudulent votes: More than 1,500 fraudulent votes were cast in the early hours of Monday in the countrys annual bird election, briefly pushing the Little-Spotted Kiwi t...

environmentalattorneyjobs.com Cross Site Scripting vulnerability OBB-1428552

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Directory Traversal Vulnerability in Intelligent Data Acquisition Instrument of Zhejiang Chuangyuan Environmental Technology Co.

Zhejiang Chuangyuan Environmental Technology Co., Ltd. is a private joint-stock enterprise and a science and technology-based innovative enterprise. The company mainly provides environmental monitoring technology research and development and technical services, installation and operation and...

FFEM: A Simple Device to Crowdsource Water Quality Data

Akamai has been a strong advocate for water conservation by supporting early-stage innovations. This World Water Monitoring Day September 18, we present the inspiring work of one of our innovators -- Foundation For Environmental Monitoring FFEM, based in Bangalore, India -- that is working on...

CVE-2020-14514

All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements...

environmental-finance.com Cross Site Scripting vulnerability OBB-1279590

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Unauthorized Access Vulnerability in Multiple Systems of Anhui Huanmei Intelligent Technology Co.

Anhui Huanmei Intelligent Technology Co., Ltd hereinafter referred to as "Huanmei Intelligent", founded on May 11, 2007, is a national high-tech enterprise specializing in environmental Internet of Things, environmental protection informationization, intelligent data collection and other...

Partnering with Microsoft on Hackathon 2020 and Saving the Planet

During the week of July 27, thousands of participants from around the globe participated in the Microsoft 2020 Hackathon. In its seventh year -- and this year, fully virtual -- the annual worldwide event brings Microsoft employees and interns together to drum up new ideas, create change, and make...

Apache HTTP Server Environment Issue Vulnerability (CNVD-2020-46279)

Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An environmental issue vulnerability exists in Apache HTTP Server versions 2.4.20 through 2.4.43. An attacker...

materaenvironmental.com.au Cross Site Scripting vulnerability OBB-1240295

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Dynamic Swagger Support Comes to Imperva

It’s no secret that the shift to DevOps deployments has taken center stage at organizations small and large. The ability to quickly configure, manage and update via APIs is critical to a company’s ability to push out small iterative changes, without human intervention. And Swagger has become the...

Directory Traversal Vulnerability in Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.

Beijing Wanwei Yingchuang Technology Development Co., Ltd. is a professional environmental protection Internet of Things products and solutions provider. Beijing Wanwei Yingchuang Technology Development Co., Ltd. pollution source online monitoring system there is a directory traversal...

agoo environmental issues loophole

agoo is a Ruby-based HTTP server by Peter Ohler Software Developers. An environmental issue vulnerability exists in agoo 2.12.3 and earlier versions. An attacker can exploit this vulnerability by sending the Content-Length header twice to conduct an HTTP request smuggling attack...

Reel Environmental Issues Vulnerability

Reel is an open source "event-based" Web server . An environmental issue vulnerability exists in Reel 0.6.1 and earlier versions, which can be exploited to conduct HTTP request smuggling attacks because the program does not properly parse the Content-Length and Transfer Encoding headers...

Information Disclosure

aegir is vulnerable to Information Disclosure. Environmental variables in the browser bundle contains tokens and keys, which can be leaked during aegir publish or aegir build...