CVE-2017-13774
Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.
Read MoreAuthor: Cyberthreat Blog
CVE-2017-13778
Fiyo CMS 2.0.7 has XSS in dapurappsapp_configsys_config.php via the site_name parameter.
Read MoreCVE-2017-13764
In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.
Read MoreEmployee Termination Procedure (Part 20 of 20: CERT Best Practices to Mitigate Insider Threats Series)
The 20th practice described in the newly released edition of the Common Sense Guide to Mitigating Insider Threats is Practice 20: Develop a comprehensive employee termination procedure. In this post, I discuss the importance of...
Read MoreCVE-2017-13762
ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.
Read More