60 matches found
The vulnerability of the Windows Update Orchestrator Service on Windows operating systems allows a malicious individual to gain increased privileges.
The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
How to Fix Security Misconfigurations Automatically
Mistakes happen, but what happens if someone accidentally introduces a misconfiguration into your public cloud account. Explore the auto-remediation capabilities offered by Trend Micro and unburden your team from manually cleaning up the mess...
Unspecified Vulnerability in Multiple NETGEAR Products
The NETGEAR R7800, among others, is a wireless router from NETGEAR. A security vulnerability exists in several NETGEAR products that stems from a misconfiguration of security settings. No details of the vulnerability are available at this time...
CVE-2017-18746
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46...
Next-Gen Ransomware Packs a 'Human' Punch, Microsoft Warns
Researchers are warning that “human operated” ransomware campaigns are growing more sophisticated, adopting new infection tactics and lateral movement techniques that traditional defense teams aren’t equipped to handle. Researchers said that “auto-spreading” ransomware – like WannaCry and NotPety...
Grouper2 - Find Vulnerabilities In AD Group Policy
What is it for? Grouper2 is a tool for pentesters to help find security-related misconfigurations in Active Directory Group Policy. It might also be useful for other people doing other stuff, but it is explicitly NOT meant to be an audit tool. If you want to check your policy configs against some...
The vulnerability of the Cisco IOS XE command-line interface allows a attacker to compromise the integrity of the protected information.
The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...
Incident Response report 2018
Download full report PDF Introduction This report covers our team's incident response practices for the year 2018. We have thoroughly analyzed all the service requests, customer conversations and incident response deliverables to provide you an overview in numbers. The report includes statistics ...
The vulnerability of the iOS operating system allows a hacker to bypass the code access procedure and unlock the device.
The vulnerability of the SpringBoard component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious individual to bypass the code access procedure and unlock the device using uncertain vectors...
Information disclosure
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...
CVE-2016-3017
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...
CVE-2016-3017
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...
CVE-2016-3017
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to circumvent restrictions on the execution of JavaScript APIs.
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are related to security configuration errors. Exploiting these vulnerabilities can allow a malicious actor to bypas...
The vulnerability of the Microsoft Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads
The vulnerability of the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious individual to bypass the security mechanisms for secure loading by using administrative privileges to install the necessary policies...
The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.
The vulnerability of the Safari browser on the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the content of web pages by using the “open window” button on the website...
The vulnerability of the iOS operating system allows a hacker to replace the actual clicks with clicking on URL links.
The vulnerability of the WebKit component of the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to substitute actual clicks on URL links with clicks on specially crafted web pages...
The vulnerability of Adobe Acrobat’s PDF editing software allows a hacker to circumvent access restrictions.
The vulnerability of the Adobe Acrobat PDF editing program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...
The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to circumvent access restrictions
The vulnerability of the Adobe Reader DC PDF viewer program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...
CNIL CookieViz Cross Site Scripting / SQL Injection Vulnerabilities
CNIL CookieViz suffers from cross site scripting and remote SQL injection vulnerabilities. CNIL CookieViz XSS + SQL injection leading to user pwnage Product link: https://github.com/LaboCNIL/CookieViz CVE references CVE-2014-8351, CVE-2014-8352 TL;DR ----- Since October 2014, the French National...