PT-2018-47: SQL Injection in EVLink Parking

The specialists of the Positive Research center have detected an SQL Injection vulnerability in the EVLink Parking product. An SQL injection vulnerability in Schneider Electric’s EVLink Parking allows attackers to obtain unauthorized access to the web interface with full privileges. How to fix Us...

PT-2018-45: Hard-coded Credentials in EVLink Parking

The specialists of the Positive Research center have detected an Hard-coded Credentials vulnerability in the EVLink Parking product. A hard-coded credentials vulnerability in Schneider Electric’s EVLink Parking allows attackers to obtain unauthorized access to the device. How to fix Use vendor's...

PT-2018-46: Code Injection in EVLink Parking

The specialists of the Positive Research center have detected a Code Injection vulnerability in the EVLink Parking product. A code injection vulnerability in Schneider Electric’s EVLink Parking allows remote attackers to execute arbitrary code and obtain unauthorized access with maximum privilege...

PT-2018-22: Denial of Service in PRTG Network Monitor

The specialists of the Positive Research center have detected a Denial of Service vulnerability in PRTG Network Monitor. Vulnerability allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a specially crafted HTTP request. How to fix Update your software up to the...

PT-2018-23: Remote Code Execution in PRTG Network Monitor

The specialists of the Positive Research center have detected a Remote Code Execution vulnerability in PRTG Network Monitor. Vulnerability due to improper handling of user input in the POST parameter 'proxyport' allows remote authenticated attackers with read-write privileges to execute an...

PT-2018-24: Authentication Bypass, Improper Authorization and Local File Inclusion in PRTG Network Monitor

The specialists of the Positive Research center have detected an Authentication Bypass, Improper Authorization and Local File Inclusion in PRTG Network Monitor. Vulnerability allows remote unauthenticated attackers to create users with read-write privileges including administrators by overriding...

Phishing in the Wild: A New Threat Research Paper

Phishing is an extremely common attack vector that has been used for many years, and the potential impact and risks involved are well known to most Internet users. Despite this, phishing is still a highly relevant attack method being used in the wild, affecting many people. The question is, how c...

glibc: denial of service in getnetbyname function

The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network name is being process...

A few words about Gartner’s “Magic Quadrant for Application Security Testing” 2018

February and March are the hot months for marketing reports. I already wrote about IDC and Forrester reports about Vulnerability Management-related markets. And this Monday, March 19, Gartner released new "Magic Quadrant for Application Security Testing". You can buy it on the official website fo...

Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Siemens Equipment : SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet module Vulnerabilities : Missing Authentication for Critical Function, Inadequate Encryption Strength 2. UPDATE...

PT-2018-14: Buffer Overflow in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in PHOENIX CONTACT FL SWITCH. A buffer overflow vulnerability in Phoenix Contact managed FL SWITCH due to improper handling of very large cookies allows attackers to obtain unauthorized access to the...

PT-2018-11: Buffer Overflow in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in PHOENIX CONTACT FL SWITCH. Buffer overflows in Phoenix Contact managed FL SWITCH allow attackers to cause a denial of service, execute arbitrary code, or disable Web and Telnet services. How to fix...

PT-2018-13: Command Injection in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected a Command Injection vulnerability in PHOENIX CONTACT FL SWITCH. Vulnerability in Phoenix Contact managed FL SWITCH allows attackers to inject and execute arbitrary OS commands. How to fix Update firmware to the latest version Advisory...

PT-2018-12: Information Disclosure in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in PHOENIX CONTACT FL SWITCH. Vulnerability in Phoenix Contact managed FL SWITCH allows unauthenticated attackers to read the configuration file. How to fix Update firmware to the latest version...

UPDATE: OWASP Dependency-Check 3.1.0

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 3.1.0! This release comes with...

SOC Forum 2017: How I Learned to Stop Worrying and Love Massive Malware Attacks

Today I spoke at SOC Forum 2017 in Moscow. It was a great large-scale event about Security Operation Centers. 2,700 people registered. Lots of people in suits . And lots of my good fellows. The event was held in Radisson Royal Congress Park. There were three large halls for presentations and a hu...

How to solve the Malwarebytes CrackMe: a step-by-step tutorial

The topic of this post is a Malwarebytes CrackMe—an exercise in malware analysis that I recently created. First, the challenge was created to serve internal purposes, but then it was released to the community on Twitter and triggered a lot of positive response. Thanks to all of you who sent in yo...

UPDATE: OWASP Dependency-Check 3.0.0

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 3.0.0! This release comes with Java 9...

PT-2017-55: Denial of Service in Suricata

The specialists of the Positive Research center have detected a Denial of Service vulnerability in Suricata. Vulnerability in DetectEngineContentInspection in Suricata allows attackers to trigger lots of redundant checks on the content of crafted network traffic resulting in a denial of service...

DGA-Detection - DGA Domain Detection using Bigram Frequency Analysis

More and more malware is being created with advanced blocking circumvention techniques. One of the most prevalent techniques being used is the use of Domain Generation Algorithms which periodically generates a set of Domains to contact a C&C server. The majority of these DGA domains generate rand...