CVE-2015-9263

The CVE-2015-9263 entry concerns Idera Up.Time Monitoring Station (versions up to 7.5.0 build 16 and 7.4.0 build 13) where the post2file.php upload mechanism allows uploading arbitrary files (e.g., PHP) to the webroot. The underlying issue is an unauthenticated arbitrary file upload that can lead...

PT-2018-4572 · Uptime · Up.Time Monitoring Station

Name of the Vulnerable Software and Affected Versions: Up.Time Monitoring Station versions 7.4.0 build 13 through 7.5.0 build 16 Description: An issue in post2file.php allows an attacker to upload arbitrary files, including .php files that can execute arbitrary OS commands. Recommendations: For...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Monitoring

Summary There are several vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring ITM components. Vulnerability Details CVEID: CVE-2018-2800 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, JRockit RMI...

Simplifying and Prioritizing Advanced Threat Response Measures

I had to go to the doctor the other day because I was miserable and sick. I don’t like going to the doctor so I waited until my stuffy nose and congestion turned into a full blown sinus infection. The doctor said this thing was going around, and I should be better in a few day with my prescriptio...

New Android Malware Framework Turns Apps Into Powerful Spyware

Security researchers have uncovered a new, powerful Android malware framework that is being used by cybercriminals to turn legitimate apps into spyware with extensive surveillance capabilities—as part of what seems to be a targeted espionage campaign. Legitimate Android applications when bundled...

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring: Kemon

If third-party vendors want to add new features to the macOS kernel, such as antivirus capabilities, ransomware blocking, data breach auditing, behavior monitoring and so on, they usually need the support of the system’s exported interfaces. At present, only two known official interfaces are...

SQL Injection Vulnerability in Frontend of GPS Intelligent Monitoring Management System of Henan Starcom

Henan Starcom Information Technology Co., Ltd. is a specialized company engaged in GPS global positioning operation services. SQL injection vulnerability exists in the front-end of the GPS Intelligent Monitoring Management System of Henan Xingtong, which can be exploited by attackers to obtain...

Detect Evil Maid Attacks: Do Not Disturb

Physical access or “evil maid” attacks are some of the most insidious threats faced by those of us who travel with our Macs. Do Not Disturb DND is a free, open-source utility that aims to detect and alert you of such attacks! One of the best ways to compromise a computer is with physical access...

UBUNTU-CVE-2018-15468

An issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging features, some of which virtualise cleanly, but some do not. In particular, Branch Trace Store is not virtualised by the processor, and software has to be careful to configure it suitably not to lock up the...

Resource-Counter - This Command Line Tool Counts The Number Of Resources In Different Categories Across Amazon Regions

This command line tool counts the number of resources in different categories across Amazon regions. This is a simple Python app that will count resources across different regions and display them on the command line. It first shows the dictionary of the results for the monitored services on a...

Arbitrary File Upload Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Coal mine remote monitoring integrated management system is a comprehensive monitoring and management system that remotely monitors all the sensing data of coal mine underground in real time through the Internet and summarizes, analyzes and alarms them in time. Sichuan Institute of Safety Science...

Vulnerabilities in the Integrated Management System for Coal Mine Remote Monitoring of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

SQL Injection Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

Microsoft ChakraCore Scripting Engine CVE-2018-8359 Information Disclosure Vulnerability

Description Microsoft ChakraCore Scripting Engine is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft ChakraCore Recommendations Run all software as a...

Microsoft Internet Explorer and Edge CVE-2018-8355 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsof...

Microsoft Edge Chakra Scripting Engine CVE-2018-8380 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

Microsoft Edge Chakra Scripting Engine CVE-2018-8381 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

Monitoring software iSmartViewPro 1.5 - SavePath for ScreenShots Buffer Overflow

Monitoring software iSmartViewPro 1.5 - SavePath for ScreenShots Buffer Overflow...

DEF CON 2018: Hacking Medical Protocols to Change Vital Signs

LAS VEGAS – In recent years there has been more attention paid to the security of medical devices; however, there has been little security research done on the unique protocols used by these devices. Many of the insulin pumps, heart monitors and other gadgets found in hospital rooms use aging...

80 to 0 in Under 5 Seconds: Falsifying a Medical Patient's Vitals

ARCHIVED STORY 80 to 0 in Under 5 Seconds: Falsifying a Medical Patient's Vitals By Douglas McKee · August 11, 2018 The author thanks Shaun Nordeck, MD, for his assistance with this report. With the explosion of growth in technology and its influence on our lives, we have become increasingly...