What is DNS (Domain Name System) Spoofing and Cache Poisoning❓

What Is DNS spoofing? Domain Name System DNS harming and caricaturing are sorts of cyberattack that adventure DNS worker weaknesses to redirect traffic from real workers towards counterfeit ones. Whenever you’ve ventured out to a fake page, you might be astounded on the best way to determine it —...

Unauthorized Access Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform (CNVD-2021-47700)

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

XSS Vulnerability in Built-in Reports of Renton Network Security Management System

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An XSS vulnerability exists in the built-in reports of the Renzi...

Logic Flaw Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

XSS Vulnerability in Reporter by Skyrise Technology Group

Skyrise Technology Group Skyrise, founded in 1995, is a leading provider of network security, big data and cloud services in China. An XSS vulnerability exists in Tianrongxin Technology Group Reporter, which can be exploited by attackers to obtain user cookie information...

Arbitrary File Download Vulnerability in Built-in Reports of Renton Network Security Management System

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file download vulnerability exists in the built-in...

Arbitrary File Download Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group

Founded on August 30, 1985, Skyrise Technology Group, or "Skyrise" for short, is a leading provider of network security, big data and security cloud services in China. An arbitrary file download vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group. An...

Tianrongxin Attack and Defense Practice Platform Has Logic Flaw Vulnerabilities

Tianrongxin Attack and Defense Drill Platform "ADP" for short is designed to integrate training, practice, competition and evaluation, providing network security attack and defense knowledge training, combat drills, supporting online capture the flag competition, and forming a complete talent...

File Download Vulnerability in Ampcom Deep Security Gateway

Ltd. is a provider of specialized core system products and security services for visual network security. A file download vulnerability exists in the Ambient Deep Security Gateway, which can be exploited by attackers to obtain sensitive information...

Stopping Ransomware and Lateral Movement with Segmentation

Learn how to take on the growing ransomware threat, and the necessity of network segmentation from VP of Cyber Research, Amit Serper...

5 Tips to Prevent and Mitigate Ransomware Attacks

Ransomware attacks cost companies over $100 billion a year. Making matters worse, the overwhelming majority of ransomware attacks now include a threat to leak stolen data if the ransom isn’t paid, a technique called “double extortion.” Cybercriminals like ransomware because the entry barrier is...

TP-Link TL-WPA4220 Information Disclosure Vulnerability

Tp-link TP-Link TL-WPA4220 is a home wireless WiFi bridge that extends wireless signals from China's Tp-link. The device can transmit data at high speed over the line to extend the network to areas that are currently not covered. The TP-Link TL-WPA4220 suffers from an information disclosure...

Arbitrary File Download Vulnerability in Rendezvous Network Security Management System

Renton Network Security Management System is one of the core products developed by Shenzhen Renton Network Technology Co., Ltd. for various industrial organizations to efficiently solve network security management problems. Rentokil Network Security Management System has an arbitrary file downloa...

Debian DLA-2686-1 : python-urllib3 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2686 advisory. Several vulnerabilities were discovered in python-urllib3, a HTTP client for Python. CVE-2018-20060 Urllib3 does not remove the Authorization HTTP header when...

Debian DLA-2687-2 : prosody regression update

It was discovered that the previous upload of the package prosody versioned 0.9.12-2+deb9u3 introduced a regression in the modauthinternalhashed module. Big thanks to Andre Bianchi for the reporting an issue and for testing the update. For Debian 9 stretch, this problem has been fixed in version...

Emby SSRF HTTP Scanner

Generates a GET request to the provided web servers and executes an SSRF against the targeted EMBY server. Returns the server header, HTML title attribute and location header if set. This is useful for rapidly identifying web applications on the internal network using the Emby SSRF vulnerability...

Arbitrary File Deletion Vulnerability in Blue Ocean Premier Billing Management System

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. The Blue Ocean Excellence Billing Management System has an arbitrary...

SQL Injection Vulnerability in Blue Ocean Premier Billing Management System (CNVD-2021-43937)

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security and improving management efficiency. The Blue Ocean Excellence Billing Management System suffers from a SQL injection...

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20 it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.

...

Command Execution Vulnerability in NETSYS of Shenzhen Network Domain Technology Co. Ltd (CNVD-2021-43912)

Ltd. was founded in 2004, is a high-tech enterprise specializing in the development of computer network security equipment. Shenzhen NETSYS Technology Co., Ltd NETSYS has a command execution vulnerability that can be exploited by attackers to execute arbitrary commands...