807 matches found
Chinese Hackers Target Taiwan's Financial Trading Sector with Supply Chain Attack
An advanced persistent threat APT group operating with objectives aligned with the Chinese government has been linked to an organized supply chain attack on Taiwan's financial sector. The attacks are said to have first commenced at the end of November 2021, with the intrusions attributed to a...
Defending the Supply Chain: Why the DDS Protocol is Critical in Industrial and Software Systems
In 2021, a team of researchers from Trend Micro Research, TXOne, ADLINK, Alias Robotics, and ZDI looked into the Data Distribution Service DDS standard and its implementations from a security angle. The full findings of this research will be presented in the S4X22 Conference in April 2022...
Directory Traversal Vulnerability in Purple File Management System
Purple Software Systems Ltd. is a company that specializes in making a chain of cloud file management services. A directory traversal vulnerability exists in the Purple File Management System, which can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in Purple File Management System of Purple Software Systems Ltd (CNVD-2021-35784)
Purple Software Systems Ltd. is a company that specializes in making a chain of cloud file management services. A SQL injection vulnerability exists in the Purple File Management System of Purple Software Systems Limited, which can be exploited by attackers to obtain sensitive information from th...
SQL Injection Vulnerability in Purple File Management System of Purple Software Systems Ltd.
Purple Software Systems Ltd. is a company that specializes in making a chain of cloud file management services. Purple Software Systems Limited Purple File Management System suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the...
SQL Injection Vulnerability in Purple File Management System
Purple Software Systems Ltd. is a software services and systems integration provider. A SQL injection vulnerability exists in the Purple File Management System, which can be exploited by attackers to obtain sensitive information from the database...
UPM 5.2: Getting temporary profiles
Getting temporary profiles...
Planning for the End of 2016: A Leap Second and the End-of-Support for SHA-1 TLS Certificates
A leap second and the final end of browser support for SHA-1 TLS certificates will happen and can potentially break software systems and applications...
Detours to modify the paragraph properties of vulnerability-vulnerability warning-the black bar safety net
Detours to modify the paragraph properties of the vulnerability Affected Software and systems Detours3. 0 and previous versions Description This issue will be its positioning as a vulnerability may be less suitable, the more likely that Detours a BUG, but because the defect will cause the exploit...
Thinking About Software Security Holistically
While assessing software systems of all types a few common mistakes regularly come up. These aren’t mistakes that lead directly to vulnerabilities, but mistakes in how some software companies think about security, that can lead to invalid assumptions, and ultimately which can allow real security...
[SECURITY] Fedora 14 Update: ardour-2.8.11-5.fc14
Ardour is a multichannel hard disk recorder HDR and digital audio worksta tion DAW. It is capable of simultaneous recording 24 or more channels of 32 bit audio at 48kHz. Ardour is intended to function as a "professional" HDR syst em, replacing dedicated hardware solutions such as the Mackie HDR,...
Sikkim Manipal University / Calcutta University Vulnerabilities
Topic: a Sikkim Manipal University portal is vulnerable to SQL Injection attack. b Calcutta University website is spreading malware via iframe code insertion. Details: a About the university: Sikkim Manipal is one of the largest private University in India. The Institute attracts students from al...
CVE-2003-1529
Vulnerability summary (CVE-2003-1529). The J Walk Application Server from Seagull Software Systems (versions 3.2C9 and earlier than 3.3c4) is vulnerable to an encoded directory traversal. An attacker can read arbitrary files by supplying a URL with an encoded dot-dot sequence (".%252e"), enabling...
aleris-sql.txt
http://www.alerisdata.com/articles/home.asp There exists an SQL injection vulnerability within the calendar section of a Aleris Software Systems web publisher. It seems thats Aleris uses this same calendar with every site they make that utilizes the publisher...
Aleris Software Systems Web Publisher Calendar SQL injection
http://www.alerisdata.com/articles/home.asp There exists an SQL injection vulnerability within the calendar section of a Aleris Software Systems web publisher. It seems thats Aleris uses this same calendar with every site they make that utilizes the publisher...
[Full-disclosure] iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability
QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use...
CVE-2005-3727
SQL injection vulnerability in debug/queryresults.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter...
CVE-2005-3728
Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote attackers to obtain sensitive configuration information...