The vulnerability of the Filesystem component of the Oracle Solaris operating system allows a perpetrator to gain access to modify, add, or delete data, or to cause a partial service failure.

The vulnerability of the Oracle Solaris operating system’s Filesystem component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause partial service interruptions...

Security Bulletin: Multiple security vulnerabilities have been addressed in IBM Security Directory Server

Summary Multiple security vulnerabilities have been fixed and delivered in IBM Security Directory Server. Vulnerability Details CVEID: CVE-2019-4551 DESCRIPTION: IBM Security Directory Server does not perform an authentication check for a critical resource or functionality allowing anonymous user...

BitDam Study Exposes High Miss Rates of Leading Email Security Systems

Imagine receiving an email from US VP Mike Pence's official email account asking for help because he has been stranded in the Philippines. Actually, you don't have to. This actually happened. Pence's email was hacked when he was still the governor of Indiana, and his account was used to attempt t...

The vulnerability of the API interface of the Threat Intelligence Exchange Server allows attackers to compromise the integrity of the protected information.

The vulnerability of the Threat Intelligence Exchange Server’s API interface is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise the integrity of the protected information through specially crafted...

Broadening the Scope: A Comprehensive View of Pen Testing

Penetration tests have long been known as a critical security tool that exposes security weaknesses through simulated attacks on an organization's IT environments. These test results can help prioritize weaknesses, providing a road-map towards remediation. However, the results are also capable of...

NewStart CGSL CORE 5.05 / MAIN 5.05 : pacemaker Multiple Vulnerabilities (NS-SA-2019-0258)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has pacemaker packages installed that are affected by multiple vulnerabilities: - A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker coul...

Debian DLA-2045-1 : tightvnc security update

Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC server/viewer application for Windows and Unix. CVE-2014-6053 The rfbProcessClientNormalMessage function in rfbserver.c in TightVNC server did not properly handle attempts to send a large amount of ClientCutTe...

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerabilities of the kernel driver and microprogramming software of Intel Ethernet Series 700 controllers allow a hacker to cause a service failure.

The vulnerability of the kernel driver and microprogramming software for Intel Ethernet Series 700 controllers is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41670)

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to this version 2.50AAHH.0C0. An attacker could exploit the vulnerability to decrypt a previously encrypted password...

The vulnerability of the Exadata Plug-In Deploy and Install sub-component, as well as the Enterprise Manager for Exadata software platform of Oracle Enterprise Manager, allows a hacker to gain full control over the application.

The vulnerability of the Exadata Plug-In Deploy and Install component of the Enterprise Manager for Exadata software from Oracle involves access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using t...

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usin...

The vulnerability of the Fluid Core component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a malicious actor to gain unauthorized access to protected data or compromise the integrity of protected information.

The vulnerability of the Fluid Core component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data or compromise the integrity of...

The vulnerability of the Integration Broker sub-component of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Integration Broker component of the PeopleSoft Enterprise PeopleTools business application package of Oracle PeopleSoft Enterprise is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

Vulnerabilities of Windows operating systems, related to authentication deficiencies, allow attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

Vulnerabilities of Windows operating systems, related to authentication deficiencies, allow attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

Cynet's Vulnerability Assessment Enables Organizations to Dramatically Reduce their Risk Exposure

Protection from cyberattacks begins way before attackers launch their weapons on an organization. Continuously monitoring the environment for security weaknesses and addressing such, if found, is a proven way to provide organizations with immunity to a large portion of attacks. Among the common...

Phishing Tool Analysis: Modlishka

Additional research and support provided by Danny Wasserman. Overview One of the goals of phishing sites is to lure individuals into providing sensitive data, such as personally identifiable information, banking and credit card details, and passwords, through the use of email, SMS, social media,...

Using MixMode and Carbon Black to Spot a Watering Hole Attack

For those not familiar with watering hole attacks, they are attacks on a specific place—such as a restaurant—that many people visit. They generally involve malicious code being injected into an iframe on the company’s website. In the case of a restaurant, for example, the online menu would be a...

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol, which stems from the use of cryptographic algorithms with defects, allows a perpetrator to carry out a “man-in-the-middle” attack, interfering with the encryption setup process for BR/EDR connections and reducing the length of the encryption key used.

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out a “man-in-the-middle” attack, interfere with the...