378 matches found
CVE-2023-45024
Best Practical Request Tracker RT 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder...
CVE-2023-41259
Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...
CVE-2023-41260
CVE-2023-41260 affects Best Practical Request Tracker (RT) prior to 4.4.7 and RT 5.x prior to 5.0.5, enabling information exposure in responses to mail-gateway REST API calls. Public references indicate fixes in RT 4.4.7 and RT 5.0.5, with Debian LTS patching RT 4.4.3-2+deb10u3. No exploitation d...
PT-2023-29363 · Best Practical · Request Tracker
Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 5.0.0 through 5.0.4 Description: The issue allows Information Disclosure via a transaction search in the transaction query builder. Recommendations: For versions 5.0.0 through 5.0.4, update to versio...
Detect and Remediate Attacks: Practical Applications for Machine Learning
...
Managing Cyber Risk for CISOs Under Pressure
Overworked CISOs are struggling to deliver the cybersecurity results their organizations expect. Fortunately, there are concrete and practical ways they can make their lives easier—while managing cyber risk effectively...
(Micro)Segmentation from a Practical Perspective
...
e-fimo.cz Cross Site Scripting vulnerability OBB-3392843
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The Best Defense Against Cyber Threats for Lean Security Teams
H0lyGh0st, Magecart, and a slew of state-sponsored hacker groups are diversifying their tactics and shifting their focus to… You. That is, if you're in charge of cybersecurity for a small-to-midsize enterprise SME. Why? Bad actors know that SMEs typically have a smaller security budget, less...
scap-security-guide bug fix and enhancement update
An update is available for scap-security-guide. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The scap-security-guide project provides a guide for configuratio...
[The Lost Bots] S02E04: Cyber's Most Dangerous Game — Threat Hunting
!\The Lost Bots\ S02E04: Cyber's Most Dangerous Game — Threat Huntinghttps://blog.rapid7.com/content/images/2022/09/The-Lost-Bots-logo-large.png Welcome back to The Lost Bots! In this episode, we dive into one of our favorite topics: threat hunting. It's a subject we've talked about before, but...
practicalsystems.com.au Cross Site Scripting vulnerability OBB-2835869
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-25801
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25801
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...
Server side request forgery (ssrf)
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
CVE-2022-25802
Best Practical Request Tracker RT before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment...