91 matches found
CVE-2020-25507
An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...
Threat and Vulnerability Management Best Practices
Today’s business world is increasingly driven by e-commerce and the cloud, which means it requires a proactive approach toward vulnerability management. After all, your company’s data—as well as your customers’—remains at risk to cybercriminals, which places the onus on you to protect your...
Takeover v0.2 - Sub-Domain TakeOver Vulnerability Scanner
Sub-domain takeover vulnerability occur when a sub-domain subdomain.example.com is pointing to a service e.g: GitHub , AWS/S3 ,.. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that sub-domain. For example, if...
How the new Talos IR Cyber Range can prepare your employees for a cyber attack
By Gerard Johansen, Charles Iszard and Luke DuCharme. With the surge of ransomware attacks, information leaks and other cyber attacks in the headlines, most companies and organizations are aware that their employees need to be trained on how to stay safe online. But the real challenge lies in how...
From E-Commerce to Enterprise Employee: How I Overcame my Fears and Doubts
By Efrat Silberhaft One year ago, I was working as the sole designer in a small e-commerce startup. When the company shut down, I had to start looking for a new job. I decided to leave the startup world. What I didn't know is that my next step would turn out to be in a different field —...
CyberAegis Aether Competition Team Reflects Bright Future for Young Women in STEM & Cybersecurity
I am always excited to get involved in conversations around getting more young women into STEM earlier. Recently, I was able to catch up with the members of the CyberAegis Aether team, an all-girls, middle school cybersecurity competition team. Here is what they had to say: Tell us a little bit...
Women in Tech and Career Spotlight: Shu White
Up next in our series featuring women in technology at Imperva is a spotlight on Shu White, the company’s vice president and deputy general counsel. Hailing from a legal background, I found her perspective particularly unique. Read below for Shu’s take on the cybersecurity industry, the inspiring...
CVE-2017-14839
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover...
CVE-2017-14838
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
Default credentials
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover...
Default credentials
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...
Design/Logic Flaw
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
CVE-2017-14838: Unrestricted Upload of File with Dangerous Type
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...
TeamWork Job Links profileChange and coverChange arbitrary file upload vulnerability (CNVD-2017-33670)
TeamWork Photo Fusion is a web-based photo management system that allows users to upload photos or view other users' photos. changeAvatar and changeCover are both functional modules. changeAvatar is a module for changing a user's avatar. changeCover is a module for changing a cover. changeAvatar ...
TeamWork Job Links profileChange and coverChange Arbitrary File Upload Vulnerability
TeamWork Job Links is a recruitment management system. profileChange and coverChange are both functional modules. profileChange is a profile change module. coverChange is a cover change module. An arbitrary file upload vulnerability exists in profileChange and coverChange in TeamWork Job Links. A...
TeamWork TicketPlus updateProfile Arbitrary File Upload Vulnerability
TeamWork TicketPlus is a ticket management system based on PHP and MySQL. updateProfile is one of the update files. An arbitrary file upload vulnerability exists in updateProfile in TeamWork TicketPlus. A remote attacker can exploit this vulnerability to upload arbitrary files...
CVE-2017-14839: Unrestricted Upload of File with Dangerous Type
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover...
