PT-2016-37: Information Disclosure in Intel

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Intel. Vulnerability in BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors allows attackers with physical access to the system to obtain sensitive information. How to f...

PT-2016-38: Information Disclosure in Intel

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Intel. Vulnerability in BIOS in Intel NUC systems based on 6th Gen Intel Core processors allows attackers with physical access to the system to obtain sensitive information. How to fix Update...

itBit Exchange: Open Redirect in https://exchange.itbit.com - False Positive

Hi there Vulnerability Title: Open Redirect in https://exchange.itbit.com Reproduction Steps: example link HTTP Response: HTTP/1.1 303 See Other .................................. Location: /google.com/%2f../ Regards, SMIT...

PT-2016-24: XML External Entity Injection in SAP NetWeaver

The specialists of the Positive Research center have detected an XML External Entity Injection vulnerability in SAP NetWeaver. Vulnerability in the "TranslationSupport" component allows attackers to obtain sensitive information or cause a denial of service using a specially crafted XML request. H...

PT-2016-23: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Reflected cross-site scripting in the "/com.sapportals.navigation.testComponent.NavigationRequestSniffer" component allows remote attackers to inject arbitrary HTML tags including...

PT-2016-16: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Stored XSS in the UpdateThemeVersionPortalComponent of the Web Application, related to unsafe storage of user input in the log file, allows attackers to execute malicious code if t...

PT-2016-27: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Reflected XSS in the DownloadServlet component, due to unsafe data copying from requests to responses, allows attackers to execute arbitrary JavaScript code in the victim’s browser...

PT-2016-19: Information Disclosure in SAP NetWeaver

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in SAP NetWeaver. Vulnerability in the MembersApp component allows attackers to enumerate usernames by observing timing differences between responses sent for valid and invalid usernames. How to...

PT-2016-18: Directory Traversal in SAP NetWeaver

The specialists of the Positive Research center have detected a Directory Traversal vulnerability in SAP NetWeaver. The vulnerability was found in the "Log Viewer" component. The attacker can upload malformed archive that contains files with special characters in their names. When the Web...

PT-2016-17: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Reflected cross-site scripting in the "/com.sap.portal.themes.styleservice.LockingTestPortalComponent" component allows remote attackers to inject arbitrary HTML tags including...

PT-2016-21: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Reflected cross-site scripting in the "/com.sap.portal.themes.integrity.personalization", "/com.sap.portal.themes.integrity.url",...

Generic OS X Malware Detection Method Explained

When it comes to detecting OS X malware, the future may not be rooted in machine learning algorithms, but patterns and heatmap visualization, a researcher posits. In an academic paper published by Virus Bulletin on Monday, Vincent Van Mieghem, a former student at the Delft University of Technolog...

Siemens SIMATIC STEP 7 (TIA Portal) Information Disclosure Vulnerabilities

OVERVIEW Siemens has released a new version of SIMATIC STEP 7 TIA Portal to mitigate information disclosure vulnerabilities. These vulnerabilities were reported directly to Siemens by Dmitry Sklyarov and Gleb Gritsai from Positive Technologies. Siemens has produced a new version to mitigate these...

Siemens Patches Password Reconstruction Vulnerability in SICAM PAS

The Industrial Control Systems Cyber Emergency Response Team ICS-CERT cautioned users who work in electrical substations to update certain builds of energy automation software this week. ICS-CERT claims two vulnerabilities exist in the Siemens SICAM Power Automation System, or PAS, that could...

PT-2016-39: Information Disclosure in StruxureWare Data Center Expert

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in StruxureWare Data Center Expert. Vulnerability in StruxureWare Data Center Expert allows attackers to obtain product passwords in cleartext by reading random access memory RAM. How to fix Upda...

PT-2016-07: Unauthorized Access in Vesta Control Panel

The specialists of the Positive Research center have detected an Unauthorized Access vulnerability in Vesta Control Panel. Directory /web/filemanager/ contains scenarios which perform file manager operations in control panel. Scenario files.php lacks active user session checking that allows...

Squid 2.x / 3.x < 3.5.17 / 4.x < 4.0.9 cachemgr.cgi RCE

According to its banner, the version of Squid running on the remote host is 2.x or 3.x prior to 3.5.17, or 4.x prior to 4.0.9. It is, therefore, affected by a buffer overflow condition in the cachemgr.cgi tool due to improper validation of user-supplied input when processing the length of content...

Robo Gallery <= 2.0.14 - Remote Code Execution

This is potentially a False Positive. Needs further investigation...

Siemens SICAM PAS Information Disclosure Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-182-02A Siemens SICAM PAS Vulnerabilities that was published November 29, 2016, on the NCCIC/ICS-CERT web site. Positive Technologies’ Ilya Karpov and Dmitry Sklyarov have identified two vulnerabilities in the...

BSI-TR-03116-4: Matches

List positive results from Policy for BSI-TR-03116-4 Test SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...