The Universal Worklist Configuration in SAP NetWeaver 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.
Monthly Archives: February 2016
CVE-2016-2389
Directory traversal vulnerability in the Manufacturing Integration and Intelligence (xMII) component in SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2230978.
My father is being held for ransom
It’s enough to make the blood run cold of every computer user – a family member calling for help: “I can’t use my computer anymore! All I see are strange messages and I can’t open ANYTHING!” Here is what one Avira employee did, didn’t do, and why the FBI can be very, very wrong:
The post My father is being held for ransom appeared first on Avira Blog.
Redaxo CMS contains multiple vulnerabilities
Posted by LSE-Advisories on Feb 16
=== LSE Leading Security Experts GmbH – Security Advisory 2016-01-18 ===
Redaxo CMS contains multiple vulnerabilities
————————————————————-
Problem Overview
================
Technical Risk: high
Likelihood of Exploitation: medium
Vendor: https://www.redaxo.org/
Tested version: Redaxo CMS v5.0.0
Credits: LSE Leading Security Experts GmbH employee Tim Herres
Advisory URL:…
Hollywood Hospital Held To Ransom By Hackers
Hacker Lexicon: What Counts As A Nation's Critical Infrastructure?
Android Mazar Malware That Can 'Wipe Phones' Spread Via SMS
Cisco Customers On Alert Over New Vulns
VTech warns users that sensitive information ‘may not be secure’
VTech has relaunched its online service Learning Lodge, but appears to have shirked responsibility regarding future data breaches.
The post VTech warns users that sensitive information ‘may not be secure’ appeared first on We Live Security.
IT security in EMEA – ESET speaks to 1,700 experts and managers. Read the full report
The state of information security in companies in the EMEA region, and the attitudes of their IT experts and managers, by ESET.
The post IT security in EMEA – ESET speaks to 1,700 experts and managers. Read the full report appeared first on We Live Security.