357 matches found
Malwarebytes is a champion of National Cybersecurity Awareness Month
October is here. For most of us in the US cybersecurity industry, it’s the month when we commemorate National Cybersecurity Awareness Month NCSAM. For those who are unfamiliar with this campaign, NCSAM generally aims at driving awareness for safe Internet use, whether you're a regular consumer or...
gertrudebell.ncl.ac.uk XSS vulnerability
Open Bug Bounty ID: OBB-681321 Description| Value ---|--- Affected Website:| gertrudebell.ncl.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
September is National Preparedness Month
National Preparedness Month is a good opportunity to assess your emergency preparedness. While general preparedness is essential to getting through an emergency related to a natural disaster, the same is true of preparing for a cyber-related event, such as identity theft or a ransomware infection...
Out-of-Bounds Read
libapr-1.so is vulnerable to out-of-bounds read. A malicious user can pass a invalid month value to the aprtimeexp or the aprosexptime functions to cause an out-of-bounds read that can lead to sensitive information being disclosed or the application crashing...
Protecting Critical Infrastructure from Cyber Threats
This last week of National Cyber Security Awareness Month NCSAM, we focus on critical infrastructure CI. For many years now we have discussed and seen the result of poorly designed and protected control system networks. I wrote on this very topic back in 2016. Now the threat landscape has evolved...
Women in Tech and Career Spotlight: Michal Pal
We continue our articles focusing on the themes of National Cyber Security Awareness Month with the first of a series of articles spotlighting some of the women who work at Imperva. I spoke to Michal Pal, automation group manager for the Imperva Incapsula product line and got to know about what...
DEBIAN-CVE-2017-12613
When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an aprtimeexpt value, potentially revealing the contents of a different static heap value or...
UBUNTU-CVE-2017-12613
When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an aprtimeexpt value, potentially revealing the contents of a different static heap value or...
PT-2017-4213 · Apache +4 · Apache Portable Runtime +4
Name of the Vulnerable Software and Affected Versions: Apache Portable Runtime APR versions 1.6.2 and prior Description: The issue is related to the apr time exp and apr os exp time functions in the Apache Portable Runtime APR. When these functions are invoked with an invalid month field value, o...
CVE-2015-5533
SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpdkeepmonth parameter to wp-admin/options-general.php. NOTE: this can be leveraged using CSRF to allow...
Bo Knows Security – Whiteboard Wednesday [Video]
October is National Cyber Security Awareness Month NCSAM and to address this week's theme of "Cybersecurity in the Workplace is Everyone’s Business" our Whiteboard Wednesday this month features Bo Kim, head of information security at Imperva. When it comes to building a security program, focusing...
Cybersecurity in the Workplace is Everyone’s Business
October is National Cybersecurity Awareness Month, an annual campaign to raise awareness about cybersecurity. Creating a culture of cybersecurity is critical for all organizations—large and small businesses, academic institutions, non-profits, and government agencies—and is a responsibility share...
A week in security (October 02 – October 08)
Last week, we gave you some tips for National Cybersecurity Awareness Month, walked through an exploration of a small adware file, and explored the complicated world of the Homograph attack. Here's what else happened in security. VB2017 Many of our team members attended VB2017 in Madrid, one of t...
October 4, 2017 – Morning Cyber Coffee Headlines – “Nobel Prize” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 4, 2017 - Headlines Carbon Black in the News: Kangaroo Ransomware uses...
ShadowBrokers Remain an Enigma
LAS VEGAS—Clarity and the ShadowBrokers are strange bedfellows. We’re closing in on the first anniversary of the mysterious group’s initial dump of NSA hacking tools and we’re still no closer to understanding who they are, where they got their stuff, and what their true motivations are. Instead a...
CVE-2016-7840
Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...
Cross site scripting
Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...
CVE-2016-7840
CVE-2016-7840 is a Cross-site Scripting (XSS) vulnerability in WEB SCHEDULE (Olive Design). The issue arises from a flaw in processing the month parameter, allowing remote actors to inject arbitrary web script or HTML. Documented references (JVN entries) describe CWE-79 and indicate impact on the...
CVE-2016-7840
Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...
CVE-2017-5628
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file...