264 matches found
Sigma Rules to Live Your Best SOC Life
Security Operations is a 24 x 7 job. It does not stop for weekends or holidays or even that much-needed coffee break after the first hour of the shift is complete. We all know this. Every SOC engineer is hoping for some rest at some point. One of my favorite jokes when talking about Security...
OS command injection vulnerability in multiple Infoscience Corporation log management tools
Overview Infoscience Corporation's multiple log management tools provide an FTP upload function as one of the log collection methods, and is able to set to allow the adminitrators to accept FTP uploads. In a situation where the FTP upload function is enabled and there is a flaw of input value...
JVN#41853173: OS command injection vulnerability in multiple Infoscience Corporation log management tools
Infoscience Corporation's multiple log management tools provide an FTP upload function as one of the log collection methods, and is able to set to allow the adminitrators to accept FTP uploads. In a situation where the FTP upload function is enabled and there is a flaw of input value handling in...
What’s New in InsightIDR: Q4 2020 in Review
Throughout the year, we’ve provided roundups of what’s new in InsightIDR, our cloud-based SIEM tool see the H1 recap post, and our most recent Q3 2020 recap post. As we near the end of 2020, we wanted to offer a closer look at some of the recent updates and releases in InsightIDR from Q4 2020...
Adaz - Automatically Deploy Customizable Active Directory Labs In Azure
This project allows you to easily spin up Active Directory labs in Azure with domain-joined workstations, Windows Event Forwarding, Kibana, and Sysmon using Terraform/Ansible. It exposes a high-level configuration file for your domain to allow you to customize users, groups and workstations...
Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting
Exploit Title: Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting Date: 2020-08-07 Vendor Homepage: https://www.nagios.com/products/nagios-log-server/ Vendor Changelog: https://www.nagios.com/downloads/nagios-log-server/change-log/ Exploit Author: Jinson Varghese Behanan @JinsonCyberSec...
SeedDMS 5.1.18 Persistent Cross Site Scripting
Document Title: =============== SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2209 Release Date: ============= 2020-04-15 Vulnerability Laboratory ID VL-ID: ====================================...
SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities
Document Title: =============== SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2209 Release Date: ============= 2020-04-14 Vulnerability Laboratory ID VL-ID: ====================================...
Deploy a Cloud WAF & DDoS Solution While Complying with Australian Data Sovereignty
Australia has strict data sovereignty laws in place to ensure that personal customer data remains within the country’s borders. However, we often hear about cloud-based WAF vendors being unable to guarantee that data will not be moved across borders for inspection and data logging purposes. This...
Micro Focus ArcSight Logger Cross-Site Request Forgery Vulnerability
Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site request forgery vulnerability exists in Micro...
SQL Injection Vulnerability in NetMizer Log Management System
The NetMizer system records all session logs flowing through the device and transmits them to an external management center, which is an analysis system in conjunction with the NetMizer system. NetMizer log management system has a SQL injection vulnerability, through which an attacker can steal...
SQL Injection Vulnerability in NetMizer Log Management System de***.php Page
The NetMizer log management system is a stand-alone log management and analysis tool. A SQL injection vulnerability exists in the de.php page of the NetMizer Log Management System, which can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in NetMizer Log Management System ge***.php Page
The NetMizer log management system is a stand-alone log management and analysis tool. A SQL injection vulnerability exists in the NetMizer Log Management System ge.php page, which can be exploited by attackers to obtain sensitive information...
[SECURITY] Fedora 30 Update: rsyslog-8.1911.0-1.fc30
Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...
Partner Perspectives: Disrupt Advanced Threats with Blumira + Carbon Black
Matt Warner is the CTO of Blumira. Modern security challenges are not easy to fix or even identify, and despite misleading advertising from some vendors, there is no one-size-fits-all solution. Blumira frequently observes large visibility gaps in existing security implementations, allowing obviou...
CVE-2019-11207
The web server component of TIBCO Software Inc.'s TIBCO LogLogic Enterprise Virtual Appliance, and TIBCO LogLogic Log Management Intelligence contains multiple vulnerabilities that theoretically allow persistent and reflected cross-site scripting XSS attacks, as well as cross-site request forgery...
Stored XSS Vulnerability in legacy IBM System x IMM - US
Lenovo Security Advisory: LEN-24785 Potential Impact: Code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6159 Summary Description: A stored cross-site scripting XSS vulnerability exists in the legacy IBM System x IMM IMM v1 embedded Baseboard Management...
Dashboards to Use on Palo Alto Networks for Effective Management
Enterprises should expect to see more cyberattacks launched against them. The data that they now gather and store have made their infrastructures key targets for hackers. Customer data and intellectual property can be sold in the black market for profit, and sensitive information can also be used...
Dashboards to Use on Palo Alto Networks for Effective Management
Enterprises should expect to see more cyberattacks launched against them. The data that they now gather and store have made their infrastructures key targets for hackers. Customer data and intellectual property can be sold in the black market for profit, and sensitive information can also be used...
