Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script through the $searchcourse parameter in mod/feedback/mapcourse.php...

Cross-Site Scripting (XSS)

Moodle is vulnerable to cross-site scriptingXSS attacks. The attacks are possible because the application does not use the RISKXSS flag in mod/quiz/db/access.php, allowing attackers to use this loophole when providing gradebook feedback for manual quiz grading...

Powershell: Cannot connect to backup server because some of its components are out of date

Challenge Connect-VBRServer PowerShell cmdlet fails with the error: Connect-VBRServer : Cannot connect to backup server because some of its components are out of date. Cause This issue occurs when the Veeam Backup & Replication Console files on the remote machine where the command was run do not...

McAfee Releases Security Bulletin for Web Gateway

McAfee has released a security bulletin to address multiple vulnerabilities in Web Gateway. Some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review McAfee Security Bulletin SB10205 and apply the necessary...

Google Releases Security Updates for Chrome

Google has released Chrome version 60.0.3112.78 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that, if exploited, may allow an attacker to take control of an affected system. Users and administrators are encouraged to review the Chrome Releases page and apply the...

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in its Web Security Appliance WSA. A remote attacker could exploit this vulnerability to take control of a system. US-CERT encourages users and administrators to review the Cisco Security Advisory for vulnerability and mitigation...

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for July 2017 to address 308 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Oracle July...

FBI Releases Article on Privacy Risks Associated with Internet-Connected Children's Toys

The Federal Bureau of Investigation FBI has released an article on the privacy risks associated with Internet-connected children's toys. FBI warns that Internet-connected toys may contain "sensors, microphones, cameras, data storage components, and other multimedia capabilities - including speech...

Cisco Releases Security Updates

Cisco has released security updates to address a vulnerability in its WebEx browser extension on Google Chrome and Mozilla Firefox. A remote attacker could exploit this vulnerability to take control of a system. US-CERT encourages users and administrators to review the Cisco Security Advisory for...

How to Contact Veeam Support Management

Contacting Support Management Veeam prides itself on our phenomenal Support Team and invests heavily in ensuring that the first person you talk to is a highly qualified specialist with the knowledge to investigate and solve your case. We strive to ensure that we continue to provide this level of...

Cisco Releases Security Updates

Cisco has released security updates to address several Simple Network Management Protocol SNMP vulnerabilities in its IOS and IOS XE software. A remote attacker could exploit these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Cis...

Samba Releases Security Updates

The Samba Team has released security updates that address a vulnerability in all versions of Samba from 4.0.0 onward using embedded Heimdal Kerberos. A remote attacker could exploit this vulnerability to take control of an affected system. US-CERT encourages users and administrators to review...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Connect. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review Adobe Security Bulletins APSB17-21 and...

FTC Releases Alert on Charity Scams

The Federal Trade Commission FTC has released an alert on charity scams. Recent acts of fraud include solicitations from scammers requesting payment to claim a sweepstakes prize. Anytime someone asks you to pay to obtain a prize, it is a scam. US-CERT encourages consumers to refer to the FTC Aler...

Information Disclosure

Moodle is vulnerable to information disclosure. Authenticated users can obtain sensitive information through a request for all course feedback within a specific time frame. This can happen because mod/feedback/lib.php doesn't check the mod/feedback:view before displaying recent feedback...

nymail.spray.se XSS vulnerability

Vulnerable URL: http://nymail.spray.se/feedbacknocookie.asp?Disabled=1"...

Cisco Releases Security Updates

Cisco has released a security advisory to address Simple Network Management Protocol SNMP vulnerabilities in its IOS and IOS XE software. A remote attacker could exploit these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Cisco...

imagineit.com XSS vulnerability

Vulnerable URL: http://www.imagineit.com/frmfeedbackfree.asp?RequireLogin=False=1"...

broadstreetvaluations.com XSS vulnerability

Vulnerable URL: https://www.broadstreetvaluations.com/champ/index.php?feedback=1/-///'/"//--...

BASS Automated Signature Synthesizer: BASS

BASS Automated Signature Synthesizer BASS pronounced “bæs” is a framework designed to automatically generate antivirus signatures from samples belonging to previously generated malware clusters. It is meant to reduce resource usage of ClamAV by producing more pattern-based signatures as opposed t...