WannaCry Update: Vulnerable SMB Shares Are Widely Deployed And People Are Scanning For Them

WannaCry Overview Last week the WannaCry ransomware worm, also known as Wanna Decryptor, Wanna Decryptor 2.0, WNCRY, and WannaCrypt started spreading around the world, holding computers for ransom at hospitals, government offices, and businesses. To recap: WannaCry exploits a vulnerability in the...

Average Logon Duration Is Not Available In Citrix Director

When an administrator logs in Citrix Director and goes to "trends" to look for Average Logon Duration, the information is not available. Logon Duration in MonitorData.Session Table in Monitoring Database also shows "Null" value for "Logon Duration" Restarting the Monitoring Service on Delivery...

SQL Injection Vulnerability in J_username Parameter of Spotlight Technology Air Quality Online Monitoring System

The Air Quality Online Monitoring System is a system produced by Spotlight Technology that can realize online automatic monitoring of regional air quality. A SQL injection vulnerability exists in the jusername parameter of Spotlight Technology's Air Quality Online Monitoring System, which allows...

Database Activity Monitoring: A Do’s and Don’ts Checklist for DBAs

In a previous post, we looked at the limitations of native audit, the free tool often used by database administrators DBAs for logging database activity. While it has its appeal—it’s already part of the database server and does not require additional cost for third-party appliances or...

Microsoft Edge CVE-2017-0236 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Oracle GoldenGate 12.1.2.0.0 - Remote Code Execution

Oracle GoldenGate 12.1.2.0.0 - Remote Code Execution !/usr/bin/env python Sources: https://silentsignal.hu/docs/S2OracleGoldenGateGOLDENSHOWER.py https://blog.silentsignal.eu/2017/05/08/fools-of-golden-gate/ GOLDENSHOWER - Oracle GoldenGate unauthenticated RCE by Silent Signal Tested with: Versio...

Oracle GoldenGate 12.1.2.0.0 - Unauthenticated Remote Code Execution Exploit

Exploit for multiple platform in category remote exploits !/usr/bin/env python Sources: https://silentsignal.hu/docs/S2OracleGoldenGateGOLDENSHOWER.py https://blog.silentsignal.eu/2017/05/08/fools-of-golden-gate/ GOLDENSHOWER - Oracle GoldenGate unauthenticated RCE by Silent Signal Tested with:...

Microsoft Edge CVE-2017-0229 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Microsoft Edge CVE-2017-0224 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Check-Host Website Monitoring Service

Check-Host is a web service for checking the availability of hosts, DNS records, and IP addresses from different locations. It may be used to gather information on target servers as a preliminary stage before launching an attack...

Latest Book Inducted into Cybersecurity Canon

Thursday evening Mrs B and I were pleased to attend an awards seminar for the Cybersecurity Canon. This is a project sponsored by Palo Alto Networks and led by Rick Howard. The goal is "identify a list of must-read books for all cybersecurity practitioners." Rick reviewed my fourth book The...

Native Auditing Tools – Performance, Cost, and Compliance Issues

As we covered in a previous post, data-centric security measures need to be implemented to meet compliance requirements and protect against complex, ever-evolving attacks. There are two primary approaches to implementing these measures: Native auditing, which uses a database server's built-in too...

Multi-Honeypot Platform: T-Pot

Multi-Honeypot Platform T-Pot is based on Ubuntu Server 16.10 LTS. The honeypot daemons as well as other support components being used have been paravirtualized using docker . This allowed developers to run multiple honeypot daemons on the same network interface without problems and make the enti...

Zabbix blast remote code execution vulnerability, a database written in a high-risk vulnerability-vulnerability warning-the black bar safety net

! About Zabbix zabbix is a WEB-based interface to provide distributed system monitoring and network monitoring capabilities of enterprise-class open source solutions. zabbix to monitor various network parameters, ensure that the server system of the security operations;and to provide flexible...

SQL Injection Vulnerability in CUID Parameter of Hikvision's In-vehicle Remote Monitoring System AddUser.php File

Hikvision vehicle remote monitoring system is a set of vehicle video networking monitoring platform software. A SQL injection vulnerability exists in the parameter CUID of the AddUser.php file in Hikvision Vehicle Remote Monitoring System. It allows attackers to exploit the vulnerability to obtai...

SQL injection vulnerability in the CUID parameter of CUInfoHandle.php file of Hikvision's in-vehicle remote monitoring system

Hikvision vehicle remote monitoring system is a set of vehicle video networking monitoring platform software. A SQL injection vulnerability exists in the CUInfoHandle.php file parameter CUID of Hikvision Vehicle Remote Monitoring System. It allows attackers to exploit the vulnerability to obtain...

Oracle MySQL Enterprise Monitor Remote Vulnerability (CNVD-2017-06479)

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost and good reliability.MySQL Enterprise Monitor is an enterprise-level monitoring software designed for MySQL database. A security...

Veeam ONE 9.5 compatibility with Veeam Cloud Connect 9.5 Update 2

Challenge Veeam ONE needs to support Veeam Cloud Connect 9.5 Update 2 monitoring. There is a fix that has to be deployed on the Veeam ONE server monitoring the Cloud Connect server of the service provider Cause There are new types of data implemented with the release of Veeam Cloud Connect 9.5...

3 Steps to Protecting Sensitive Data

Cyber criminals, compromised insiders, malicious users, hacktivists. It seems like everyone is getting in on the threat game. In fact, despite efforts to prevent them, last year the U.S. experienced a 40% increase in data breaches according to a report by the Identity Theft Resource Center and...

SQL injection vulnerability in the id parameter of the treeformap.php file of Hikvision remote monitoring client system

Hikvision is a video-centric IoT solution and data operation service provider. A SQL injection vulnerability exists in the id parameter of the treeformap.php file in Hikvision's remote monitoring client system. It allows attackers to exploit the vulnerability to obtain sensitive database...