4176 matches found
HVACking: Understanding the Delta Between Security and Reality
ARCHIVED STORY HVACking: Understanding the Delta Between Security and Reality By Douglas McKee · August 09, 2019 The McAfee Labs Advanced Threat Research team is committed to uncovering security issues in both software and hardware to help developers provide safer products for businesses and...
HVACking: Understanding the Delta Between Security and Reality
ARCHIVED STORY HVACking: Understanding the Delta Between Security and Reality By Douglas McKee · August 09, 2019 The McAfee Labs Advanced Threat Research team is committed to uncovering security issues in both software and hardware to help developers provide safer products for businesses and...
WordPress Popup Builder plugin <= 3.44 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability found by Tin Duong Fortinet FortiGuard Labs in WordPress Popup Builder plugin versions = 3.44. Solution Update the WordPress Popup Builder plugin to the latest available version at least 3.45...
URGENT/11: VxWorks RTOS 11 0 day vulnerabilities affect 20 million device-bug warning-the black bar safety net
Armis Labs security researchers recently in the currently most widely used embedded devices in real timeoperating system real-time operating systems, RTOS）VxWorks found 11 a 0 day vulnerability, theoperating systemis widely used in aerospace, defense, industrial, medical, electronic, network, and...
The Capital One Breach& “cloud_breach_s3” CloudGoat Scenario
The post The Capital One Breach & “cloudbreachs3” CloudGoat Scenario appeared first on Rhino Security Labs...
Unspecified Vulnerability in Puppet
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. A security vulnerability exists in...
Critical Flaws Found in VxWorks RTOS That Powers Over 2 Billion Devices
Security researchers have discovered almost a dozen zero-day vulnerabilities in VxWorks, one of the most widely used real-time operating systems RTOS for embedded devices that powers over 2 billion devices across aerospace, defense, industrial, medical, automotive, consumer electronics, networkin...
nsd -- Stack-based Buffer Overflow
Frederic Cambus reports: nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dnameconcatenate function in dname.c...
AWS IAM Privilege Escalation – Methods and Mitigation – Part 2
The post AWS IAM Privilege Escalation - Methods and Mitigation - Part 2 appeared first on Rhino Security Labs...
EvilGnomes Linux malware record activities & spy on users
By Uzair Amir The EvilGnomes Linux malware has been linked to infamous Russian threat actors from the Gamaredon Group. The IT security researchers at Intezar Labs have discovered a sophisticated new backdoor Linux malware in the wild that has been developed to target Linux devices. Dubbed...
HT2 Labs Learning Locker Cross-Site Scripting Vulnerability
HT2 Labs Learning Locker is an open source learning record repository. A security vulnerability exists in HT2 Labs Learning Locker version 3.15.1. An attacker can exploit this vulnerability to inject malicious HTML and JavaScript code into the DOM of a website...
CVE-2019-12834
HT2 Labs Learning Locker 3.15.1 has a cross-site scripting (XSS) flaw allowing injection of HTML/JavaScript into the DOM via PATH_INFO to the dashboards/ URI. The vulnerability is documented across multiple CVE records in the connected set, with consistent description of DOM-based injection and l...
Exploring the Power of Phished Persistent Cookies in AWS
The post Exploring the Power of Phished Persistent Cookies in AWS appeared first on Rhino Security Labs...
Unspecified Vulnerability in CloudBees Jenkins Docker Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Docker Plugin is used in one of the plugin to...
Unusual Linux Ransomware Targets NAS Servers
A rare instance of ransomware targeting Linux-based file storage systems network-attached storage servers, specifically has been spotted, spreading via 15 separate but related campaigns. The adversaries behind the effort are continuing their depredations on an ongoing basis, according to...
CloudGoat Official Walkthrough Series: “rce_web_app”
The post CloudGoat Official Walkthrough Series: “rcewebapp” appeared first on Rhino Security Labs...
CVE-2019-13207
nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dnameconcatenate function in dname.c...
Stack overflow
nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dnameconcatenate function in dname.c...
