Positive apabi thesis submission system has unauthorized access vulnerability

Positive apabi thesis submission system is a thesis collection and management system. An unauthorized operation vulnerability exists in the Positive apabi Thesis Submission System, which allows an attacker to bypass privilege authentication and obtain the administrator's password. It poses...

PT-2018-10: Server-Side Request Forgery in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected a Server-Side Request Forgery vulnerability in Ipswitch WhatsUp Gold. A server-side request forgery vulnerability in NmAPI.exe in Ipswitch WhatsUp Gold allows attackers to gain unauthorized access to the WhatsUp Gold system, obtain...

PT-2018-08: SQL injection in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected an SQL injection vulnerability in Ipswitch WhatsUp Gold. SQL injection vulnerability in Ipswitch WhatsUp Gold, due to insufficient validation of user input on some .ASP pages, allows attackers to execute arbitrary SQL commands and obta...

PT-2018-09: Code Injection in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected a Code Injection vulnerability in Ipswitch WhatsUp Gold. A code injection vulnerability in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold allows attackers to execute arbitrary commands and code on the WhatsUp Gold server via a specially...

PT-2017-09: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. A cleartext transmission of information vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH100...

PT-2018-06: Authentication Bypass in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Authentication Bypass vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. Vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic...

PT-2017-07: Session Fixation in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected a Session Fixation vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. A session fixation vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS...

PT-2018-40: Stored XSS in SAP NetWeaver Development Infrastructure Cockpit

The specialists of the Positive Research center have detected a Stored XSS vulnerability in SAP NetWeaver Development Infrastructure Cockpit. A stored cross-site scripting XSS vulnerability in the '/nwdicockpit/srv/data/userprefs' component in SAP NetWeaver Development Infrastructure Cockpit allo...

PT-2018-44: Directory Traversal in SAP Business Process Automation by Redwood

The specialists of the Positive Research center have detected a Directory Traversal vulnerability in SAP Business Process Automation by Redwood. A directory traversal vulnerability in SAP Business Process Automation BPA, due to insufficient validation of path information provided by users, allows...

PT-2018-42: Information Disclosure in SAP NetWeaver System Landscape Directory

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in SAP NetWeaver System Landscape Directory. A vulnerability in SAP NetWeaver System Landscape Directory allows attackers to obtain information about the intranet via port scanning. How to fix Us...

PT-2017-10: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. Vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic...

PT-2018-43: XXE Injection in SAP Business Process Automation by Redwood

The specialists of the Positive Research center have detected an XXE Injection vulnerability in SAP Business Process Automation by Redwood. A vulnerability in SAP Business Process Automation BPA, due to insufficient validation of XML documents accepted from untrusted sources, allows attackers to...

PT-2018-39: Cross-Site Scripting in SAP Business Warehouse Universal Data Integration

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP Business Warehouse Universal Data Integration. A cross-site scripting XSS vulnerability in SAP Business Warehouse Universal Data Integration, due to insufficient encoding of user input, allow...

PT-2017-08: Information Exposure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Exposure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. An information exposure through query strings vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100,...

PT-2018-41: Server-Side Request Forgery in SAP NetWeaver Knowledge Management Configuration Service

The specialists of the Positive Research center have detected a Server-Side Request Forgery vulnerability in SAP NetWeaver Knowledge Management Configuration Service. A server-side request forgery SSRF vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 allow...

PT-2017-06: Race Condition in Linux

The specialists of the Positive Research center have detected a Race Condition vulnerability in Linux kernel. Race condition exists in drivers/tty/nhdlc.c in the Linux kernel through 4.10.1 when accessing nhdlc.tbuf list. This allows a local, unprivileged user to gain privileges or cause a denial...

Opera installer mistakenly marked as malicious

Security Opera installer mistakenly marked as malicious Share February 22nd, 2017 During the past few days some of our users have contacted us raising the concern that the Qihoo 360 Total Security anti-virus software has been labelling the Opera installer executable for Windows as some form of...

Does Reliable Real Time Detection Demand Prevention?

Chris Sanders started a poll on Twitter asking "Would you rather get a real-time alert with partial context immediately, or a full context alert delayed by 30 mins?" I answered by saying I would prefer full context delayed by 30 minutes. I also replied with the text at left, from my first book Th...

PT-2017-04: Security Restrictions Bypass in Kaspersky Embedded Systems Security

The specialists of the Positive Research center have detected a Security Restrictions Bypass vulnerability in Kaspersky Embedded Systems Security. Vulnerability in the Application Control component of Kaspersky Embedded Systems Security allows attackers to gain privileges and execute arbitrary...

PT-2017-03: Buffer Overflow in Checker ATM Security

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in hecker ATM Security. An attacker able to spoof the control server can cause a buffer overflow and execute arbitrary code. How to fix Update your software up to the latest version Advisory status...