CVE-2018-10017

soundlib/Sndfx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service out-of-bounds read via an IT or MO3 file with many nested pattern loops...

UBUNTU-CVE-2018-10017

soundlib/Sndfx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service out-of-bounds read via an IT or MO3 file with many nested pattern loops...

CVE-2018-10017

soundlib/Sndfx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service out-of-bounds read via an IT or MO3 file with many nested pattern loops...

CVE-2018-10017

soundlib/Sndfx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service out-of-bounds read via an IT or MO3 file with many nested pattern loops...

The Role That IT Security Teams Need to Play in Connected Hospitals

The WannaCry outbreak that reportedly raked in US$1B in damage costs also forced doctors to cancel scheduled appointments, among other things, brought on warranted concern over pervasive ransomware attacks that could stem from oft-overlooked components of healthcare networks—exposed medical cyber...

Description of the security update for Office 2010: April 10, 2018

Description of the security update for Office 2010: April 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

OCS Inventory NG ocsreports 2.4 Cross Site Scripting

Affected Products OCSInventory-ocsreports 2.4 older releases have not been tested References https://www.secuvera.de/advisories/secuvera-SA-2017-03.txt used for updates https://www.ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-been-released/ Release announcement of OCS Inventory 2.4.1...

autoscout24.it XSS vulnerability

Open Bug Bounty ID: OBB-598159 Description| Value ---|--- Affected Website:| autoscout24.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Physician, protect thyself: An ounce of prevention is worth a pound of cure

In part one of our Physician, protect thyself series, we recognized significant security problems within the healthcare industry that need addressing. Health organizations moving from the paper to the 'puter—a shift meant to improve care and overall patient experience—inadvertently introduced...

it-production.com XSS vulnerability

Open Bug Bounty ID: OBB-596609 Description| Value ---|--- Affected Website:| it-production.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

it-trainings.de XSS vulnerability

Open Bug Bounty ID: OBB-593283 Description| Value ---|--- Affected Website:| it-trainings.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the FileStorageService service in the automation software Track-It! allows a hacker to upload arbitrary files to the root directory of the web server and execute arbitrary code.

The vulnerability of the FileStorageService service in the automation software Track-It! is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to the root directory of the web server and execute arbitrary code with privilege...

Feds Take On Foreign Hackers, While 880K Orbitz Customers “Likely” Affected by Data Breach

In this edition of Qualys’ infosec news digest, we look at Orbitz’s data breach, AMD’s vulnerabilities controversy, and recent actions by the U.S. government against alleged Russian and Iranian cyber spies. Orbitz was kinda, sorta, maybe hacked Orbitz disclosed last week that personal information...

Partner Perspectives: How an IT Service Provider and Red Canary Stopped a Malware Outbreak

Editor's Note: This blog originally appeared on redcanary.com. In this post, a technical account manager recounts how Red Canary partnered with an IT service provider to help one of their customers stop a rapidly spreading network worm. This blog goes behind the scenes of the incident response...

logicalis-hybrid-it.com XSS vulnerability

Open Bug Bounty ID: OBB-589094 Description| Value ---|--- Affected Website:| logicalis-hybrid-it.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Teen Hacks Ledger Hardware Cryptocurrency Wallet

By Waqas A 15-year-old IT security researcher Saleem Rashid has identified a This is a post from HackRead.com Read the original post: Teen Hacks Ledger Hardware Cryptocurrency Wallet...

it-media.groupe-psa.com XSS vulnerability

Open Bug Bounty ID: OBB-585117 Description| Value ---|--- Affected Website:| it-media.groupe-psa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

How to Monitor XenMobile Servers through SCOM

Citrix added IT infrastructure monitoring through SNMP in XenMobile Server 10.8. For details, see SNMP monitoring. You can use various monitoring applications that support SNMP monitoring. This section discusses how to use SCOM for monitoring your XenMobile Server nodes. SCOM is a part of the...

Essays from 7 Experts on Moving to a Cloud-Based Endpoint Security Platform

Carbon Black recently published a series of essays about the experiences of experts in the field on information security as they moved their endpoint security program to the cloud; this is one of those essays. To read the full series check out 7 Experts on Moving to a Cloud-Based Endpoint Securit...

la7.it XSS vulnerability

Open Bug Bounty ID: OBB-583026 Description| Value ---|--- Affected Website:| la7.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...