Leveraging AppSec vendors amidst layoffs

The tech sector has been hit hard with layoffs and cutbacks, driving more companies to outsource their IT needs. Is it time for your organization to make the transition?...

aircraft24.it Cross Site Scripting vulnerability OBB-3383057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cybersecurity for businesses of all sizes: A blueprint for protection

One of the primary reasons why cybersecurity remains a complex undertaking is the increased sophistication of modern cyber threats. As the internet and digital technologies continue to advance, so do the methods and tools cybercriminals use. This means that even the most secure systems are...

How Wazuh Improves IT Hygiene for Cyber Security Resilience

IT hygiene is a security best practice that ensures that digital assets in an organization's environment are secure and running properly. Good IT hygiene includes vulnerability management, security configuration assessments, maintaining asset and system inventories, and comprehensive visibility...

US hospital forced to divert ambulances after cyberattack

The Idaho Falls Community Hospital fell victim to a cyberattack on Monday May 29, 2023. As a result, the hospital had to divert ambulances to other nearby hospitals and close some of its clinics. The hospital is keeping the public updated through its website and Facebook page. "Our commitment to...

CVE-2022-47526

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...

CVE-2022-47525

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...

CVE-2022-47526

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...

Design/Logic Flaw

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...

Path traversal

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...

Information Disclosure Vulnerability in Baseline Verification System of Deepcore Technology Co.

Founded in 2000, DeepSign Technology Co., Ltd. is a product and service provider specializing in enterprise-class network security, cloud computing, IT infrastructure and the Internet of Things IoT. An information disclosure vulnerability exists in the baseline verification system of DeepService...

CVE-2022-47526

Fox-IT DataDiode (Fox DataDiode) v3.4.3 exposes a path-traversal vulnerability allowing arbitrary file writes and remote code execution in the downstream node user context. Exploitation requires no user interaction and can be achieved over the network with no privileges. Several connected sources...

CVE-2022-47526

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...

CVE-2022-47526

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...

Fox-IT DataDiode 数字错误漏洞

Fox-IT DataDiode Fox DataDiode is an IT security product from Fox-IT. It guarantees unidirectional data transfer in real time over fast 1-10Gbps data connections. A security vulnerability exists in Fox-IT DataDiode Fox DataDiode version 3.4.3. An attacker could exploit this vulnerability to cause...

Fox-IT DataDiode 路径遍历漏洞

Fox-IT DataDiode Fox DataDiode is an IT security product from Fox-IT. It guarantees unidirectional data transfer in real time over fast 1-10Gbps data connections. A security vulnerability exists in Fox-IT DataDiode Fox DataDiode version 3.4.3. An attacker can exploit the vulnerability to execute...

CVE-2022-47525

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...

When is it time for a cyber hygiene audit?

Cyber hygiene is crucial for keeping your organization safe by limiting security breaches, threats against your IT infrastructure, and more. Read on to learn more about what makes up cyber hygiene, and how to audit its effectiveness...

CVE-2022-47525

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 is affected by a Divide-by-Zero vulnerability in the packet parser. A remote attacker could cause a denial-of-service without user interaction. Exploitation details are not provided in the supplied documents beyond the remote, unauthenticated nature of t...

Find APIs Hiding in the Shadows

What’s hiding in the shadows? It’s a well understood reality that unmanaged IT assets tend to be unmonitored IT assets, and that both introduce risk. Whether it’s a forgotten about application, or an unmanaged cloud storage volume, you can’t protect what you don’t know about. Attackers thrive on...