PT-2018-35: Authorization Bypass in APC Uninterrupted Power Supplies

The specialists of the Positive Research center have detected an Authorization Bypass vulnerability in APC Uninterrupted Power Supplies. Vulnerability in Schneider Electric's MGE SNMP/Web Card 66074 installed in MGE UPS and MGE STS, related to the integrated web server Port 80/443/TCP, allows...

PT-2018-36: Information Disclosure in APC Uninterrupted Power Supplies

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in APC Uninterrupted Power Supplies. Vulnerability in Schneider Electric's MGE SNMP/Web Card 66074 installed in MGE UPS and MGE STS, related to the integrated web server Port 80/443/TCP, allows...

PT-2018-37: Unauthorized Actions in APC Uninterrupted Power Supplies

The specialists of the Positive Research center have detected an Unauthorized Actions vulnerability in APC Uninterrupted Power Supplies. Vulnerability in Schneider Electric's MGE SNMP/Web Card 66074 installed in MGE UPS and MGE STS, related to the integrated web server Port 80/443/TCP, allows...

PT-2018-38: Information Disclosure in APC Uninterrupted Power Supplies

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in APC Uninterrupted Power Supplies. Vulnerability in Schneider Electric's MGE SNMP/Web Card 66074 installed in MGE UPS and MGE STS, related to the integrated web server Port 80/443/TCP and SSL...

双杨OA系统 /DSOA_TY/Office_Supplies/Goods_In.aspx SQL注入漏洞

No description provided by source...

Moderate: Red Hat Security Advisory: pacemaker security, bug fix, and enhancement update

Updated pacemaker packages that fix one security issue, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

caving-supplies.co.uk XSS vulnerability

Vulnerable URL: http://www.caving-supplies.co.uk/cgi-bin/psProdSrch.cgi?mode=user=transid=shopFoldertext=derp =All=All=Search Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

CareFusion Pyxis SupplyStation System Vulnerabilities

OVERVIEW Independent researcher Billy Rios identified authentication vulnerabilities in CareFusion’s Pyxis SupplyStation system. CareFusion has implemented additional controls to mitigate some of these vulnerabilities in the SupplyStation system. Some of the reported vulnerabilities could be...

Israeli Military, Intelligence Sites Down After Threat by Anonymous

The Websites of Israel’s Mossad and Shinbet intelligence services as well as the Israel Defense Forces IDF site were knocked offline today following a Nov. 4 threat by Anonymous. However, members of the group may not be to blame. On Nov. 4, members of Anonymous threatened a cyber-attack in...

Anonymous Hackers Call United Nation (UN) for their Responsibilities Regarding Libya !

Anonymous Hackers Call United Nation UN for their Responsibilities Regarding Libya ! NOTE : One More Press Released By Anonymous Hackers on there official site/Facebook/Twitter. We are Publishing This news, just as the Media of "Hacking Field" . These is No relation b/w 'The Hacker News' &...

Expert Advises Caution on SCADA Security Hysteria

TORONTO–The months-long hysteria over Stuxnet and its hyper-sophistication and passel of unknown vulnerabilities has had the effect of creating a secondary wave of panic about the vulnerability of industrial control and SCADA systems. But the concern about spontaneous utility outages and...