528 matches found
Moxa OnCell G3100-HSPA Series
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Moxa Equipment: OnCell G3100-HSPA Series Vulnerabilities: Reliance on Cookies without Validation and Integrity Checking, Improper Handling of Length Parameter Inconsistency, NULL Pointer Dereference AFFECTED PRODUCTS...
Navarino Infinity Blind SQL Injection / Session Fixation
There is also a blog post about that on: https://medium.com/@evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3 Vulnerability Security Advisory ======================================================================= title: Multiple vulnerabilities product: All Navarino infinity products...
Exploit for CVE-1999-0532
BulkCVE-1999-0532Scanner A t...
A week in security (January 1 – January 7)
New year, new threats, as 2018 gets underway. On our blog, we had dubious searches aplenty for those hunting for Malwarebytes information, and we also covered the huge Meltdown/Spectre bug, affecting hardware going back to 10 years. Other news Coin miners are at it again, with a proof of concept...
Release Notes for Veeam ONE 9.5 Update 3
Challenge Release Notes for Veeam ONE 9.5 Update 3 Cause Please confirm you are running Veeam ONE 9.5 prior to installing this update. You can check this under Help | About in Veeam ONE Monitor Client , the build number should be 9.5.0.3201 or 9.5.0.3254. After upgrading, your version build will ...
Claymore Dual ETH + DCRSCLBCPASC GPU Miner - Stack Buffer Overflow Path Traversal
Claymore Dual ETH + DCRSCLBCPASC GPU Miner - Stack Buffer Overflow Path Traversal !/usr/bin/env python -- coding: UTF-8 -- github.com/tintinweb optional: pip install pysocks https://pypi.python.org/pypi/PySocks ''' API overview: nc -L -p 3333 "id":0,"jsonrpc":"2.0","method":"minergetstat1"...
Moxa NPort 5110, 5130, and 5150
CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Moxa Equipment: NPort 5110, 5130, 5150 Vulnerabilities: Injection, Information Exposure, Resource Exhaustion AFFECTED PRODUCTS The following versions of NPort, a serial network interface, are affected: NPort 5110...
November 3, 2017 – Morning Cyber Coffee Headlines – “Friday” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 3, 2017 - Headlines Carbon Black in the News: Endpoint security needs...
Infogram: Report Design Critical Stored DOM XSS Vulnerability
Hi Team, Another XSS vulnerability in report designer but this one is critical. Problem Point Report's Overview Table Report Creation Url https://infogram.com/app/edit/e7b161f1-f708-48e5-bab7-de9887ae202a Sample Data Click for Detail Sample URL https://infogram.com/report-classic-1g57pr0g3xdvp01...
Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea
We observed several high-volume FormBook malware distribution campaigns primarily taking aim at Aerospace, Defense Contractor, and Manufacturing sectors within the U.S. and South Korea during the past few months. The attackers involved in these email campaigns leveraged a variety of distribution...
Malware Triage Tool: pftriage
pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile filemagi...
Abusing Token Privileges For LPE
Abusing Token Privileges For LPE. Papers exploit for Windows platform |=-----------------------------------------------------------------------=| |=----------------= Abusing Token Privileges For LPE=------------------=| |=-----------------------------------------------------------------------=|...
PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch
CVSS v3 9.4 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available Vendor: PDQ Manufacturing, Inc. Equipment: LaserWash, Laser Jet and ProTouch Vulnerabilities: Improper Authentication, Missing Encryption of Sensitive Data AFFECTED PRODUCTS The following version...
Moodle Information Disclosure Vulnerability (CNVD-2017-24413)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in the Course overview block of Moodle version 3.3. An...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
UBUNTU-CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
Code injection
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
