4743 matches found
kato.solutions XSS vulnerability
Open Bug Bounty ID: OBB-708453 Description| Value ---|--- Affected Website:| kato.solutions Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
NRCC Email Hack Highlights Lack of Visibility & Proactive Threat Hunting at Political Organizations
Earlier this week, Politico reported that the National Republican Congressional Committee NRCC suffered a major attack prior to the 2018 U.S. midterm elections, with thousands of sensitive emails from four senior aides exposed to an outside intruder. While the impact of this breach is still...
New ‘Under the Radar’ report examines modern threats and future technologies
As if you haven't heard it enough from us, the threat landscape is changing. It's always changing, and usually not for the better. The new malware we see being developed and deployed in the wild have features and techniques that allow them to go beyond what they were originally able to do, either...
Veil - Tool To Generate Metasploit Payloads That Bypass Common Anti-virus Solutions
Veil is a tool designed to generate metasploit payloads that bypass common anti-virus solutions. Veil is current under support by @ChrisTruncer Software Requirements: The following OSs are officially supported: Debian 8+ Kali Linux Rolling 2018.1+ The following OSs are likely able to run Veil: Ar...
Kicking off the Microsoft Graph Security Hackathon
Cybersecurity is one of the hottest sectors in tech with Gartner forecasting worldwide information spending to exceed $124 billion by the end of 2019. New startups and security solutions are coming onto the market while attackers continue to find new ways to breach systems. The security solutions...
Hackers Breach Dunkin' Donuts Accounts in Credential Stuffing Attack
A credential stuffing attack has allowed hackers to take a big bite out of Dunkin’ Donuts customer data. The donut giant announced Tuesday evening that a data breach in October may have led to customers’ personal information being compromised. Dunkin’ Brands Inc. in an advisory posted to its...
AWS Security Hub and Deep Security
One of the biggest challenges in maintaining your security posture is visibility. You have security controls deployed throughout the stack, and each fo these tools is generating its own set of data points and has its own view of your deployment. Managing the multitude of alerts and events from...
How to help maintain security compliance
This is the last post in our eight-blog series on deploying Intelligent Security scenarios. To read the previous entries, check out the Deployment series page. Your employees need to access, generate, and share organizational information ranging from extremely confidential to informal; you must...
Partner Perspectives: Collaborate and Consolidate with King & Union and Carbon Black
Peter Prizio Jr. is the Senior Product Manager for King & Union. One of the biggest challenges facing security organizations today is dealing with the overwhelming number of alerts received each and every day. A staggering 27 percent of IT professionals report receiving more than one million aler...
solutions.3m.com XSS vulnerability
Open Bug Bounty ID: OBB-693701 Description| Value ---|--- Affected Website:| solutions.3m.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
5 (Not So) Scary Infosec Questions to Answer this Halloween
It’s Halloween. Time for candy checking, cavities and the start of the retail season. And while attacks will rise around the holidays, don't let the FUD machine get you too scared about things the go bump in the infosec night. Here are five things that should actually concern you. They were easil...
ASRock Drivers - Privilege Escalation
SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ ASRock Drivers Elevation of Privilege Vulnerabilities 1. Advisory Information Title: ASRock Drivers Elevation of Privilege Vulnerabilities Advisory ID: CORE-2018-0005 Advisory URL:...
Intel Quartus Family - Privilege Escalation Vulnerability
Document Title: =============== Intel Quartus Family - Privilege Escalation Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2159 Watch Video: https://www.youtube.com/watch?v=zX1Fmz0sAHk Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2160...
Code injection
Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
CVE-2018-18390
User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
CVE-2018-18395
Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
CVE-2018-18392
Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
Remote code execution
Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
