Cross site request forgery (csrf)

An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. Locus Energy meters use a PHP script to manage the energy meter parameters for voltage monitoring and network configuration. The PHP code does not properly validate information...

CVE-2016-5782

The CVE affects Locus Energy LGate devices (LGate firmware prior to 1.05H and models 50, 100, 101, 120, 320). The root cause is improper validation of POST data in the PHP-based web interface, enabling command injection via the LGate web server. Impact: remote, unauthenticated attackers could exe...

Bejtlich Books Explained

A reader asked me to explain the differences between two of my books. I decided to write a public response. If you visit the TaoSecurity Books page, you will see two different types of books. The first type involves books which list me as author or co-author. The second involves books to which I...

Important: Red Hat Security Advisory: nagios security update

An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Cyber Probe - Capturing, Analysing and Responding to Cyber Attacks

Cyberprobe is a distributed software architecture for monitoring of networks against attack. It consists of two components: cyberprobe, which collects data packets and forwards them over a network in standard streaming protocols; and cybermon which decodes protocols, and invokes user-defined logi...

CVE-2016-5590

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...

CVE-2016-5590

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...

CVE-2016-5590

CVE-2016-5590 is a vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent Monitoring: Agent). Affected are 3.1.3.7856 and earlier. It enables a high-privileged attacker with network access via TLS to compromise the MySQL Enterprise Monitor, with potential takeover o...

Unspecified Vulnerability in Oracle MySQL Enterprise Monitor

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost and good reliability.MySQL Enterprise Monitor is an enterprise-level monitoring software designed for MySQL database. A security...

Privilege escalation vulnerabilities in IBM System Networking Switch Center and Lenovo Switch Center - Lenovo Support US

No description provided...

Privilege escalation vulnerabilities in IBM System Networking Switch Center and Lenovo Switch Center

Lenovo Security Advisory:LEN-2015-074, LEN-2746 Potential Impact: Escalation of Privileges Severity: High Summary: Multiple vulnerabilities have been identified in the following products: - IBM System Networking Switch Center - Lenovo Switch Center Description: Lenovo Switch Center, previously...

Release Notes for Veeam ONE 9.5 Update 1

Challenge Release Notes for Veeam ONE 9.5 Update 1 Cause Please confirm you are running Veeam ONE 9.5 prior to installing this update. You can check this under Help | About in Veeam ONE Monitor Client , the build number should be 9.5.0.xxx. After upgrading, your version build will be 9.5.0.3254...

SA139 : November 2016 NTP Security Vulnerabilities

SUMMARY Symantec Network Protection products using affected versions of the NTP reference implementation from ntp.org are susceptible to multiple vulnerabilities. A remote attacker can modify the targets system time, prevent the target from synchronizing its time, cause denial of service through...

Real Time Network Monitoring: Cyberprobe

Real Time Network Monitoring Cyberprobe is a distrbuted architecture for real-time monitoring of networks against attack. The software consists of a number of components, including: a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, whi...

ICSMA-17-009-01A_St. Jude Merlin@home Transmitter Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSMA-17-009-01 St. Jude Merlin@home Transmitter Vulnerability that was published January 9, 2017, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 5 -------- MedSec Holdings has identified a channel...

Description of the cumulative update for Office Communications Server 2007 R2, Core Components: September 2011

Describes the cumulative update for Office Communications Server 2007 R2, Core Component that is dated September 2011.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Core Component that is dated September 2011. ResolutionUpdate package...

MS15-086: Security update for Update Rollup 7 for System Center 2012 R2 Operations Manager: August 11, 2015

MS15-086: Security update for Update Rollup 7 for System Center 2012 R2 Operations Manager: August 11, 2015 Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation...

Update Rollup 7 for System Center 2012 R2 Orchestrator

Update Rollup 7 for System Center 2012 R2 Orchestrator Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 R2 Orchestrator. It also contains the installation instructions for Update Rollup 7 for System Center 2012 R2 Orchestrator. Issu...

Description of Update Rollup 2 for System Center 2012 R2 Operations Manager

Description of Update Rollup 2 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Operations Manager and the Linux and Unix Monitoring Pack. Additionally, this article contains the...

Description of Update Rollup 6 for System Center 2012 Operations Manager Service Pack 1

Description of Update Rollup 6 for System Center 2012 Operations Manager Service Pack 1 Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 Service Pack 1 SP1 Operations Manager and the Linux and Unix Monitoring Pack. Additionally, thi...