solutions

Bot Protection

Bot Protection Understanding Risks and Strategies for Mitigation Prophaze offers a sophisticated bot protection solution. Also, it can prevent scanners

Common Vulnerabilities and Exposures Container Security Security solutions

Vulnerabilities Discovered in CIPAce Enterprise Platform

Overview : A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP

Common Vulnerabilities and Exposures Security solutions

Data Center Security Privilege Escalation

Overview : Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege

Container Security Security solutions

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers

Overview : PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server

Common Vulnerabilities and Exposures Security solutions

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula.

Overview : The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be

cyber security news Security solutions

PRTG-Network-Monitor-Information-Disclosure

Overview : PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server

Common Vulnerabilities and Exposures Security solutions

unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

Overview : An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by

Common Vulnerabilities and Exposures cyber security news Professional Services Security solutions

Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys.

Overview : Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker

Common Vulnerabilities and Exposures Security solutions

CRLF/HTML entity injection with most recent version of PHPMyAdmin #16056

Overview : ** DISPUTED ** phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences

Common Vulnerabilities and Exposures solutions

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution

Common Vulnerabilities and Exposures Security solutions

Kubelet component in versions 1.15.0-1.15.9

Overview : The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial

Common Vulnerabilities and Exposures Container Security Security solutions

NGINX Controller versions prior to 3.2.0,

Overview : In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can

Common Vulnerabilities and Exposures Security solutions

TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms,

Overview : On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with

Common Vulnerabilities and Exposures Container Security solutions

Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.

[vc_row][vc_column][vc_column_text] Overview : Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as

Common Vulnerabilities and Exposures solutions

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.

Overview : Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation. CVE-2020-10939

Common Vulnerabilities and Exposures Security solutions

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

Overview : Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

Common Vulnerabilities and Exposures Container Security solutions

There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-Encoding and Content length headers.

Overview : There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5

solutions

[vc_row][vc_column width=”1/2″][vc_empty_space height=”15px”][vc_column_text][/vc_column_text][/vc_column][vc_column width=”1/2″][vc_empty_space height=”15px”][vc_column_text] Bot Detection The Problems 20% of all web traffic is bad bots targeting APIs to

solutions

IoT WAF

Securing IoT APIs Prophaze Raspberry PI based custom appliance can be hooked at the gateway of your IoT interface. It

solutions

WAF API Gateway

[vc_row][vc_column width=”1/2″][vc_empty_space height=”15px”][vc_column_text][/vc_column_text][/vc_column][vc_column width=”1/2″][vc_empty_space height=”15px”][vc_column_text] WAF for your API Gateway Prophaze EagleEye can secure your API end points against OWASP

solutions

solutions

Bot Protection

Vulnerabilities Discovered in CIPAce Enterprise Platform

Data Center Security Privilege Escalation

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula.

PRTG-Network-Monitor-Information-Disclosure

unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys.

CRLF/HTML entity injection with most recent version of PHPMyAdmin #16056

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution

Kubelet component in versions 1.15.0-1.15.9

NGINX Controller versions prior to 3.2.0,

TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms,

Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-Encoding and Content length headers.

Bot Detection

IoT WAF

WAF API Gateway

Kubernetes Cyber Security

Kubernetes WAF

Bot Mitigation