17644 matches found
Afternoon Cyber Tea: Cybersecurity challenged to meet diversity goals
Organizations often know they need to identify and address their cybersecurity blind spots. They also know the technology exists to help them do that. However, they don’t often understand how to communicate this need within their organization to justify the expense, nor do they know how to share...
What Is a Supply Chain Attack?
From NotPetya to SolarWinds, it’s a problem that’s not going away any time soon...
Unauthorized Access Vulnerability in TamronOS IPTV System
TamronOS IPTV system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution. An unauthorized access vulnerability exists in the TamronOS IPTV system. An attacker can exploit the vulnerability to obtain sensitive information...
CVE-2021-29507
GENIVI Diagnostic Log and Trace (DLT) affects GENIVI DLT versions 2.10.0–2.18.6. The vulnerability arises when a configuration file contains special characters, causing a vulnerable component to crash and preventing applications from generating dlt logs. As documented, there was no patch at publi...
Arbitrary File Download Vulnerability in H3C S1526
H3C S1526 is a new generation switch launched by Xinhua San Technologies Co. It is targeted at the cultural industry market such as Internet cafes, sing-along bars and digital movie theaters. The H3C S1526 suffers from an arbitrary file download vulnerability that can be exploited by attackers to...
Trixbox 2.8.0.4 - (lang) Path Traversal Exploit
Exploit Title: Trixbox 2.8.0.4 - 'lang' Path Traversal Exploit Author: Ron Jost Hacker5preme Credits to: https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/ Credits to: Sachin Wagh Vendor Homepage:...
GHSA-27G8-R9VW-765X Private Field data leak
This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control related oracle attack in that the attack method guides an attacker during...
SOC 2 Type 2 Guide⚠️: Compliance and Certification — Part 1
SOC 2 Type 2 Guide⚠️: Compliance and Certification — Part 1 First part. Learn about SOC 2 compliance. Why it matters when choosing a SaaS provider. Protect your clients’ privacy Every day, the way we use the internet continues to evolve. And as a result, it’s now easier for people to access their...
Weak password vulnerability in ACF series firewalls of Shenzhen Domain Technology Co.
Ltd. was established in February 02, 2018, the scope of business includes general business items are: technical development, sales, technical consulting, technical maintenance of computer software, hardware and accessories; computer system integration; database, network technology technology...
CVE-2021-3527
CVE-2021-3527 affects the QEMU USB redirector (usb-redir). A flaw lets the guest influence the length of a dynamically allocated VLA on the stack by combining small USB packets into a large bulk transfer, with no bounded total size, causing a denial of service on the QEMU process. Public advisori...
Input validation
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position...
CVE-2018-10867
CVE-2018-10867 affects Red Hat redhat-certification 7. The flaw is an access-control error on the /update/results page, allowing a remote attacker to delete any file accessible by the user running httpd (apache). Root cause: insufficient access restriction for update results. Impact: potential da...
What is encryption? And why it matters in a VPN
Encryption is a term used to describe the methods that hide the true meaning of messages using code, especially to prevent unauthorized access to the information in the messages. Not all users of virtual private networks VPN care about encryption, but many are interested and benefit from strong...
CVE-2020-22015
CVE-2020-22015 is a Buffer Overflow in FFmpeg 4.2, triggered by an out-of-bounds condition in libavformat/movenc.c (mov_write_video_tag). The vulnerability could allow a remote attacker to obtain sensitive information, cause a Denial of Service, or execute arbitrary code. Connected advisories con...
Logic flaws exist in the lock group management system of Jiangsu Esso Electronic Technology Co.
Ltd. is a high-tech enterprise specializing in the development, production and sales of passive intelligent locks and intelligent lock group management system. There is a logic flaw vulnerability in the Lock Group Management System of Jiangsu Esso Electronics Technology Co. An attacker could...
Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected XSS (cisco-sa-asa-rxss-L54Htxp)
According to its self-reported version, Cisco ASA Software is affected by a vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...