509 matches found
Care2x Open Source Hospital Information Management 2.7 Alpha - Multiple Stored XSS Vulnerability
Exploit Title: Care2x Open Source Hospital Information Management 2.7 Alpha - 'Multiple' Stored XSS Exploit Author: securityforeveryone.com Author Mail: helloATsecurityforeveryone.com Vendor Homepage: https://care2x.org Software Link: https://sourceforge.net/projects/care2002/ Version: = 2.7 Alph...
In0ri - Defacement Detection With Deep Learning
In0ri is a defacement detection system utilizing a image-classification convolutional neural network. Introduction When monitoring a website, In0ri will periodically take a screenshot of the website then put it through a preprocessor that will resize the image down to 250x250px and numericalize t...
Why I Love (Breaking Into) Your Security Appliances
Amid the Colonial Pipeline and JBS ransomware attacks that sparked shockwaves among media worldwide, news broke that attackers were able to compromise Colonial Pipeline through a legacy VPN account. The account lacked multifactor authentication MFA and wasn’t in active use within the business, a...
3 Major Benefits of Cloud Migration: Cloud Compliance
Part of a secure cloud migration strategy is ensuring compliance of all the moving pieces. Just like your cloud journey, compliance isn’t a final destination. Discover how to leverage cloud security tools to ensure compliance is met along the way...
PT-2021-5594
Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools versions prior to 7.2.1.65 Bitdefender Total Security versions prior to 25.0.26 Description The issue allows a local attacker to elevate to 'NT AUTHORITYSystem'. Impersonation enables the server thread to...
Rapid7 Joins Statement On DMCA Lawsuits Against Security Tools
Rapid7 has joined a statement from members of the cybersecurity community cautioning against using Section 1201 of the Digital Millennium Copyright Act DMCA to suppress beneficial security tools. In the past, Rapid7 has written extensively about DMCA Sec. 1201’s impact on performing independent...
Nebula - Cloud C2 Framework, Which At The Moment Offers Reconnaissance, Enumeration, Exploitation, Post Exploitation On AWS
Nebula is a Cloud and hopefully DevOps Penetration Testing framework. It is build with modules for each provider and each functionality. As of April 2021, it only covers AWS, but is currently an ongoing project and hopefully will continue to grow to test GCP, Azure, Kubernetes, Docker, or...
WoWonder Social Network Platform 3.1 - Authentication Bypass Exploit
Exploit Title: WoWonder Social Network Platform 3.1 - Authentication Bypass Exploit Author: securityforeveryone.com Researchers : Security For Everyone Team - https://securityforeveryone.com Vendor Homepage: https://www.wowonder.com/ Software Link:...
WoWonder Social Network Platform 3.1 - Authentication Bypass
Exploit Title: WoWonder Social Network Platform 3.1 - Authentication Bypass Date: 11.06.2021 Exploit Author: securityforeveryone.com Researchers : Security For Everyone Team - https://securityforeveryone.com Vendor Homepage: https://www.wowonder.com/ Software Link:...
EBook – Creating a Large Company Security Stack on a Lean Company Budget
The speed at which malicious actors have improved their attack tactics and continue to penetrate security systems has made going bigger the major trend in cybersecurity. Facing an evolving threat landscape, organizations have responded by building bigger security stacks, adding more tools and...
CVE-2021-3553
A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions...
PT-2021-5048
Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65 Bitdefender Total Security versions prior to 7.2.1.65 Description The issue is related to incorrect default permissions in the bdservicehost.exe and...
CVE-2021-3485
An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...
CVE-2021-3485
CVE-2021-3485 affects Bitdefender Endpoint Security Tools for Linux prior to 6.2.21.155. An Improper Input Validation in the Product Update feature allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. Remediation: update to...
Bitdefender Endpoint Security Tool 输入验证错误漏洞
Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. An input validation error vulnerability exists in Product Update for Linux Bitdefender Endpoint Security Tools versions prior to 6.2.21.155, which can be exploited by an attacker to...
CVE-2021-3485: Download of Code Without Integrity Check
An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...
PT-2021-20696 · Bitdefender · Bitdefender Endpoint Security Tools For Linux
Name of the Vulnerable Software and Affected Versions: Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.155 Description: An Improper Input Validation issue in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to...
It’s Time to Prepare for a Rise in Insider Threats
Earlier this year, Tesla discovered that an employee had stolen more than 6,000 files containing sensitive code. The software engineer, who was only employed for two weeks, had been hired as one of the few people who could access these files. This incident highlights the danger that insider threa...
CVE-2020-15279
An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research...
CVE-2020-15279
CVE-2020-15279 affects Bitdefender Endpoint Security Tools for Windows prior to 6.6.23.320. The issue is an improper access control in the logging component that allows a regular user to learn the scanning exclusion paths, enabling disclosure of sensitive configuration details. The vulnerability ...