Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09039)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

ManageEngine EventLog Analyzer Detection (HTTP)

HTTP based detection of ManageEngine EventLog Analyzer. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Put FIM in Your GDPR Toolbox

File integrity monitoring, like other foundational security practices such as vulnerability management, helps organizations comply with the EU’s General Data Protection Regulation GDPR. FIM specifically provides security controls in three key areas for GDPR: Ensuring integrity of data stored in...

[SECURITY] Fedora 28 Update: exim-4.90.1-4.fc28

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

[SECURITY] Fedora 27 Update: exim-4.90.1-3.fc27

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

An Android App for RFID Card Cloning: Project Walrus

Walrus is an Android app that simplifies using several existing contactless card cloning devices during red team engagements and physical security assessments. It offers a common interface and database for storing cloned cards. Currently, Walrus supports the industry standard Proxmark 3, Chameleo...

GE Infinia/Infinia with Hawkeye 4 Authentication Bypass Vulnerability

GE Infinia/Infinia with Hawkeye 4 is an American General Electric GE medical imaging device using gamma rays equipped with the Hawkeye 4 system. A security vulnerability exists in GE Infinia/Infinia with Hawkeye 4 that stems from the program's use of default credentials or hard-coded credentials....

GE Xeleris Authentication Bypass Vulnerability

GE Xeleris is a medical imaging management system from General Electric GE. A security vulnerability exists in GE Xeleris that stems from the device's use of default credentials or hard-coded credentials. A remote attacker could use this vulnerability to bypass authentication and gain access to t...

WordPress WP HTML Sitemap plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP HTML Sitemap plugin is used in one of the by entering a short code in the page to add HTML sitemap plugin. A...

The vulnerabilities of the IBM Spectrum Scale and General Parallel File System data storage management software are caused by buffer overflows, allowing attackers to execute arbitrary code with root privileges or trigger service interruptions.

The vulnerabilities of the IBM Spectrum Scale and General Parallel File System data storage management software are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code with root privileges or cause service interruptions...

Path Traversal

general-file-server is vulnerable to path traversal attacks. Using a string including ../, attackers can traverse the server and any file with a known path...

GDPR: The Stakes Are High and Time Is of the Essence

With the General Data Protection Regulation GDPR going into effect in under three months, the countdown clock is fast approaching zero for organizations worldwide that handle personal data of EU residents. GDPR is a very broad and wide-ranging regulation that requires organizations to obtain a lo...

Building an incident response program: creating the framework

In part one of our series, our overview of Building an incident response plan, we discussed what regulations organizations will need to meet in order to address incident/breach response protocols laid out in the EU’s General Data Protection Regulation GDPR. This week, we’ll talk to you about step...

Joomla Joomanager 2.0.0 Component - com_Joomanager Arbitrary File Download Exploit

Exploit for php platform in category web applications !/usr/bin/python2 -- coding:utf-8 -- ''' GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright C 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it ...

general-supplies.com XSS vulnerability

Open Bug Bounty ID: OBB-571104 Description| Value ---|--- Affected Website:| general-supplies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 26 Update: exim-4.90.1-2.fc26

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

General Electric D60 Line Distance Relay Buffer Overflow Vulnerability (CNVD-2018-03478)

General Electric Company is an electrical equipment, appliance and electronic equipment manufacturing company. A buffer overflow vulnerability exists in the General Electric D60 Line Distance Relay, which can be exploited by an attacker to execute arbitrary code in the context of an affected...

General Electric D60 Line Distance Relay Buffer Overflow Vulnerability

General Electric Company is an electrical equipment, appliance and electronic equipment manufacturing company. A buffer overflow vulnerability exists in the General Electric D60 Line Distance Relay, which can be exploited by an attacker to execute arbitrary code in the context of an affected...

Kentico CMS 9.x < 9.0.51, 10.x < 10.0.48 Access Control Bypass Vulnerability

Kentico CMS is prone to an access control bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:kentico:kentico";...

WordPress flickrRSS plugin cross-site scripting vulnerability (CNVD-2018-05367)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. flickrRSS plugin is used in one of the plugin to display images. A cross-site scripting vulnerability exists in th...