Close the Gap Between IT & Security with Our New App: Qualys VMDR for ITSM

In recent years, the world has seen an alarming rise in cyber-attacks. According to the just released Verizon DBIR report, the rate of increase of ransomware attacks in 2021 was greater than its rate of increase in the last five years, combined. Malicious exploitation of vulnerabilities continues...

Three Reasons Why Unification Drives Modern Data Security Strategy

Today, the necessities of business innovation compel most organizations to have several teams with diverse priorities managing dozens of data sources, all with different structures. This makes it impossible to secure complete data repositories successfully using traditional methods. This post wil...

Announcing 2022 Microsoft Security Excellence Awards winners

Spirits soared at the Microsoft Security Excellence Awards on June 5, 2022. And is it any wonder? The celebration marked the first time that Microsoft executives and Microsoft Intelligent Security Association MISA members had gathered in person in more than two years so it was a special night for...

CVE-2022-29597

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...

CVE-2022-29597

CVE-2022-29597 affects Solutions Atlantic Regulatory Reporting System (RRS) v500. It exposes a Local File Inclusion (LFI) vulnerability via the ShowDocument/ShowDocument.aspx page, where an authenticated user can abuse the fileName parameter to reference internal system files (eg. web.config) and...

CVE-2022-29597

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...

Cross site scripting

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...

Solutions Atlantic Regulatory Reporting System 跨站脚本漏洞

Solutions Atlantic Regulatory Reporting System is a flagship regulatory reporting system from Solutions Atlantic, Inc. Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to a cross-site scripting vulnerability that could be exploited to execute JavaScript code...

CVE-2022-29597: Improper Limitation of a Pathname to a Restricted Directory

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...

PT-2022-19717

Name of the Vulnerable Software and Affected Versions Solutions Atlantic Regulatory Reporting System RRS version v500 Description The issue allows any authenticated user to reference internal system files within requests made to the "RRSWeb/maint/ShowDocument/ShowDocument.aspx" page. The server...

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System (RRS) v500 is affected by a reflected Cross‑Site Scripting (XSS) vulnerability in RRSWeb/maint/ShowDocument/ShowDocument.aspx. The issue arises from the fileName parameter being reflected into a JavaScript context, enabling injection of arbitrary scr...

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...

The Rapid7 Sales Culture and Experience: An Inside Look From 2 VPs

Sales roles are all about people. That holds true not only when you're building relationships with prospects but also in your day-to-day experience on the team. Having the right culture and people around you can make or break your success, satisfaction, and long-term growth. If you're a job seeke...

CVE-2022-29598: Improper Neutralization of Input During Web Page Generation

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...

PT-2022-19718

Name of the Vulnerable Software and Affected Versions Solutions Atlantic Regulatory Reporting System RRS version v500 Description The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited via the "RRSWeb/maint/ShowDocument/ShowDocument.aspx" API endpoint. Recommendation...

Beneath the surface: Uncovering the shift in web skimming

Microsoft security researchers recently observed that web skimming campaigns now employ various obfuscation techniques to deliver and hide skimming scripts. It’s a shift from earlier tactics where attackers conspicuously injected malicious scripts into e-commerce platforms and content management...

Beneath the surface: Uncovering the shift in web skimming

Microsoft security researchers recently observed that web skimming campaigns now employ various obfuscation techniques to deliver and hide skimming scripts. It’s a shift from earlier tactics where attackers conspicuously injected malicious scripts into e-commerce platforms and content management...

Put SecOps in the Driver’s Seat with Custom Assessment and Remediation

When zero-day threats emerge, time is of the essence. Security teams struggle to manage and respond to a range of challenges that often require custom approaches outside of existing vulnerability and security programs. Recently, many companies scrambled to mount their defenses against the Log4She...

3 Recommendations to Ensure Your API Security Solution can Drive Data Visibility and Quality

Today at least 90% of developers are using APIs in cloud-native web application development. According to new data collected by Forrester Research and presented in their report, Improve API Performance with a Sound API Security Strategy, 62 percent of IT decision makers believe the value they gai...