CVE-2015-9281

CVE-2015-9281 concerns the Logon Manager in SAS Web Infrastructure Platform (pre-9.4M3). The vulnerability is a reflected XSS on the Timeout page, caused by insufficient input sanitization on that page. Affected component: Logon Manager’s web UI; the issue is triggered when processing user-contro...

CVE-2018-20733

The vulnerability CVE-2018-20733 affects SAS Web Infrastructure Platform’s BI Web Services prior to 9.4M6. The root issue is an XML External Entity (XXE) exposure within BI Web Services, potentially impacting confidentiality as indicated by CVSS metrics (C: Partial, A: None, I: None for CVSS2; C:...

CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

Black Hat 2013: What Have We Learned

LAS VEGAS–The Black Hat conference is one of the best opportunities each year to see new and innovative research, commune with some of the smartest folks in the industry and generally get a sense of where things stand and where they’re going. This year’s conference was one of the larger in histor...

Online Ad Networks Leverages to Launch Javascript Attacks

LAS VEGAS – Researchers have figured out how to leverage the reach of online advertising networks to distribute javascript of their choosing, creating the equivalent of a botnet of ad impressions capable of crashing underlying webservers or distributing malware on a massive scale for pennies on t...

Hyperic HQ Enterprise|E v4.5.1 - Multiple Vulnerabilities

Document Title: =============== Hyperic HQ Enterprise|E v4.5.1 - Multiple Vulnerabilities Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 240 Product & Service Introduction: =============================== Designed for companies who r...

Insecure Mail Server Offers Chinese Government Accounts To The Masses

A security researcher who identified holes in SCADA software used by utilities in China has issued a new warning to that country’s CERT about insecure Web infrastructure, including an e-mail server that allows any Web user to create their own Chinese government mail account. Dillon Beresford, a...