CVE-2021-32747

Icinga Web 2 had a vulnerability where custom variables (user-defined keys/values in configuration objects) could be exposed to unauthorized users for versions 2.0.0 through 2.8.2. The issue occurs because custom variables are displayed to logged-in users with access to the relevant hosts/service...

CVE-2021-32746

Icinga Web 2 versions 2.3.0–2.8.2 expose a vulnerability in the built‑in doc module that, via a specific route, allows reading arbitrary files accessible to the web server user. The issue is fixed in 2.9.0, 2.8.3, and 2.7.5. Workarounds include disabling the doc module or revoking access permissi...

How to monitor xenserver resource utilization on Citrix ADC

How to monitor xenserver resource utilization on Citrix ADC...

Logic Flaw Vulnerability in Homs 5.0 Monitoring Center

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Homs5.0 monitoring center has a logic flaw vulnerability,...

New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021

For years, security professionals have recognized the need to enhance SaaS security. However, the exponential adoption of Software-as-a-Service SaaS applications over 2020 turned slow-burning embers into a raging fire. Organizations manage anywhere from thirty-five to more than a hundred...

NinjaRMM Access Control Error Vulnerability

NinjaRMM is a remote monitoring and management software from NinjaRMM USA. Improve business efficiency by combining monitoring, alerting, patching, antivirus, backup and IT automation all in a single management platform. An Access Control Error vulnerability exists in NinjaRMM, which arises from...

Kaseya VSA SQL注入漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A SQL injection vulnerability exists in Kaseya VSA versions prior to 9.5.5, which can be exploited by an attacker to...

NinjaRMM has an unspecified vulnerability

NinjaRMM is a remote monitoring and management software from NinjaRMM USA. Improve business efficiency by combining monitoring, alerting, patching, antivirus, backup and IT automation all in a single management platform. NinjaRMM suffers from a security vulnerability that stems from insecure Agen...

Top 10 Cloud security tips

About half of the pen tests we’re asked to do involved cloud services at some point. We’ve even tested a cloud platform on an aeroplane – the irony was not lost on us! There is a multitude of ways to improve the security of your cloud platforms and often those ways are ever-changing or obscured...

Unauthorized Access Vulnerability in Thermal Network Wireless Monitoring System of Shandong Starter Measurement and Control Equipment Co.

Ltd. business scope includes: industrial automatic control system device manufacturing; industrial automatic control system device sales; supply of instruments and meters manufacturing; supply of instruments and meters sales; other special-purpose instrument manufacturing and so on. Shandong...

SQL Injection Vulnerability in Network Video Surveillance System of Tianmai Technology

Zhengzhou Tianmai Technology Co., Ltd. was founded in 2004, is located in Zhengzhou City, National High-tech Industrial Development Zone, is specializing in public transportation intelligent system solutions provider, is the "city intelligent bus solutions" and "3G/4G video, Beidou/GPS monitoring...

[Security Nation] Jonathan Cran on demystifying startup funding for security companies

!\Security Nation\ Jonathan Cran on demystifying startup funding for security companieshttps://blog.rapid7.com/content/images/2021/07/securitynationlogo.jpg In this episode of Security Nation, we’re joined by Jonathan Cran. We wade into uncharted territory with Jonathan, as he claims the title of...

County-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd. suffers from unauthorized access vulnerability

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

File upload vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd (CNVD-2021-51387)

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

SQL injection vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

Directory traversal vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

NinjaRMM 访问控制错误漏洞

NinjaRMM is a remote monitoring and management software from NinjaRMM USA. Improve business efficiency by combining monitoring, alerting, patching, antivirus, backup and IT automation all in a single management platform. An Access Control Error vulnerability exists in NinjaRMM, which arises from...

Top 8 Database Security Best Practices

There is a large body of knowledge on what activities are required in order to secure databases and in order to comply with regulations and requirements. We’ve gathered the top 8 best practices for ensuring database security. Databases are arguably the most important and, unfortunately, also the...

Logic Flaw Vulnerability in Dahua DSS Configuration System, In-vehicle Surveillance Platform

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-based intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the Dahua DSS configuration system and vehicle monitoring platform, which can be exploited by attackers to compromise the...

Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system has information leakage vulnerability

Shijiazhuang Hejia Technology Co., Ltd. is a high-tech enterprise specializing in the development and application of computer room environment and power equipment monitoring system products. Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system information leakage vulnerability,...