Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

Upcoming Events:

Training: Certified Information Systems Security Professional (CISSP) – Prüfungsvorbereitungskurs – Teil 1

18.11.2025 - 20.11.2025

Training: Certified Information Systems Security Professional (CISSP) – Prüfungsvorbereitungskurs – Teil 2

26.11.2025 - 27.11.2025

Die IT-Tag

09.12.2025

Tomasz Miksa chaired the DMP Common Standards WG session at the 12th RDA Plenary in Gaborne

November 13, 2018

The 12th Plenary of the Research Data Alliance was held 5-8 November 2018 in Gaborone under the theme “The Digital Frontiers of Global Science”. The meeting has gathered scientists, experts and practitioners engaged in the advancement of data-driven science and economy from around… Read More

Vulnerability Disclosures made from MaTRIS Group acknowledged at CVE MITRE: CVE 2015-4631, CVE 2015-4632, CVE 2015-4633

November 7, 2018

Some of the vulnerabilities found in the Koha Library software in the past from the combinatorial security testing team of SBA Research, now part of the MaTRIS group, have been officially acknowledged in the CVE-MITRE database.More details can be found below, below: CVE-2015-4631 (Multiple… Read More

WE ARE HIRING!

October 19, 2018

Consultant Information Security (Details in German) Junior System Engineer – Vollzeit (m/w) Junior System Engineer – Teilzeit (m/w) Project assistant positions in Mathematics for Testing, Reliability and Information Security Technical IT Security Consultant (Junior/Senior): Professional Services (Details in German)… Read More

Yvonne Poul completed MBA studies

October 18, 2018

Yvonne Poul has successfully completed her MBA studies in “Innovation Management and Entrepreneurship”, conducted by WU Vienna and TU Vienna. Congratulations!… Read More

IKT-Sicherheitskonferenz and Young Researchers´ Day 2018

October 17, 2018

The IKT-Sicherheitskonferenz hosted by the Austrian Armed Forces has taken place in Alpbach from October 16-17, 2018. In addition to Wilfried Mayer giving a talk on current development in the TOR network SBA has once more hosted the Young Researchers´ Day. IKT-Sicherheitskonferenz… Read More

Philipp Reisinger gives a talk at the IKT Security Conference 2018

October 17, 2018

Philipp Reisinger will hold an exciting talk today entitled “Two Worlds and One Reality – Approaching Security and Risk in the Real and the Virtual World” at the Congress Center Alpbach (IKT Security Conference 2018). Interested people will have the opportunity to attend the talk/lecture also on November 14, in… Read More

Impressions of the 4th Blockchain Networking Meeting

October 16, 2018

Stephanie Jakoubi represented SBA at the 4th blockchain networking meeting hosted by Digital City Wien and Accenture. Read More

SBA Security Advisory – Teltonika RUT9XX – Unauthenticated OS Command Injection (CVE-2018-17533)

October 12, 2018

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization. We recommend to update Teltonika RUT9XX routers to version RUT9XX_R_00.04.233 or later. For further details, see the full security advisory. Read More

SBA Security Advisory – Teltonika RUT9XX – Missing Access Control to UART Root Terminal (CVE-2018-17534)

October 12, 2018

Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges. We recommend to update Teltonika RUT9XX routers to version RUT9XX_R_00.04.233 or later. For further details, see the full security advisory. Read More

SBA Security Advisory – Teltonika RUT9XX – Reflected Cross-Site Scripting (XSS) (CVE-2018-17532)

October 12, 2018

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges. We recommend to update Teltonika RUT9XX routers to version RUT9XX_R_00.05.01.1 or later. For further details, see the full security advisory. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Tomasz Miksa chaired the DMP Common Standards WG session at the 12th RDA Plenary in Gaborne

Vulnerability Disclosures made from MaTRIS Group acknowledged at CVE MITRE: CVE 2015-4631, CVE 2015-4632, CVE 2015-4633

WE ARE HIRING!

Yvonne Poul completed MBA studies

IKT-Sicherheitskonferenz and Young Researchers´ Day 2018

Philipp Reisinger gives a talk at the IKT Security Conference 2018

Impressions of the 4th Blockchain Networking Meeting

SBA Security Advisory – Teltonika RUT9XX – Unauthenticated OS Command Injection (CVE-2018-17533)

SBA Security Advisory – Teltonika RUT9XX – Missing Access Control to UART Root Terminal (CVE-2018-17534)

SBA Security Advisory – Teltonika RUT9XX – Reflected Cross-Site Scripting (XSS) (CVE-2018-17532)

SBA Newsletter

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

SBA Newsletter

Highlights of the past years:

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.