0.4AI Score
7.1AI Score
Low severity flaw in RIM BlackBerry PlayBook OS browser
Summary The web browser which comes as part of the RIM BlackBerry PlayBook OS can be tricked into disclosing the contents of local files through the planting of a malicious HTML file through the standard download mechanism. It should be noted that in order to exploit this issue, user interaction...
-0.6AI Score
0.004EPSS
FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities
Title: FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities Date: 2012-12-01 References: http://www.vulnerability-lab.com/get_content.php?id=702 VL-ID: 702 Common Vulnerability Scoring System: 2.1 Introduction: FortiWeb web application firewalls protect, balance, and accelerate your web...
0.5AI Score
0.1AI Score
0.2AI Score
7.1AI Score
Wordpress Plugin plg_novana Sql Injection Vulnerability
WordPress Plg Novana third party plugin suffers from a remote SQL injection...
8.1AI Score
Memoryze for the Mac: Support Added for OS X Mountain Lion (10.8)
Earlier this year, Mandiant launched a new freeware tool: Memoryze for the Mac™. The tool brings many of the features of Memoryze™ to the Apple® Macintosh platform, enabling acquisition of memory images via the command-line or a simple GUI. We are excited to announce it now fully supports OS X...
0.1AI Score
Large Scale Brute Force Cryptanalysis: Wisecracker
Large scale brute force cryptanalysis needs a tremendous amount of computational power that government agencies like the NSA and companies like Google® have. An average security researcher might want to have such capabilities as well but they do not have the tools or the computational resources....
AI Score
An In-Depth Look Into Data Stacking
Mandiant's Nick Bennett and Jake Valletta discussed data stacking at MIRcon™ last month. If you were unable to attend the talk, we will discuss this data analysis technique here on the M-Unition blog. What is Data Stacking? Data stacking is the application of frequency analysis to large volumes of....
0.4AI Score
That’s a Wrap! Highlights from MIRcon 2012
Three years ago when we set out to create a conference that would bring together the greatest minds in the information security industry, we could not imagine the overwhelmingly positive response and growth MIRcon™ would receive year after year. Our goal for MIRcon is simple: to inform innovators.....
-0.1AI Score
FortiWeb 4kC / 3kC / 1kC / VA Cross Site Scripting
FortiWeb 4kC, 3kC, 1kC, and VA suffer from multiple cross site scripting...
6.8AI Score
Fake Lookout android app stealing your SMS and MMS messages
Android's App store is currently facing a new dilemma as its security has been compromised once again. Researchers from security firm TrustGo have recently spotted on Google Play a bogus app that supposedly automatizes the updating of a batch of other apps. The malicious code was hidden within an.....
7AI Score
Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities
Title: Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities Date: 2012-09-06 References: http://www.vulnerability-lab.com/get_content.php?id=557 VL-ID: 557 Common Vulnerability Scoring System: 5 Introduction: The FortiGate series of multi-threat security systems detect and eliminate the most....
0.3AI Score
Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities
Title: Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities Date: 2012-09-06 References: http://www.vulnerability-lab.com/get_content.php?id=557 VL-ID: 557 Common Vulnerability Scoring System: 5 Introduction: The FortiGate series of multi-threat security systems detect and eliminate the most....
0.3AI Score
Fortigate UTM WAF Appliance - Cross Site Vulnerabilities
Title: Fortigate UTM WAF Appliance - Cross Site Vulnerabilities Date: 2012-09-07 References: http://www.vulnerability-lab.com/get_content.php?id=559 VL-ID: 559 Common Vulnerability Scoring System: 3.5 Introduction: The FortiGate series of multi-threat security systems detect and eliminate the most....
-0.2AI Score
Fortigate UTM WAF Appliance Multiple Vulnerabilities
Multiple input validation vulnerabilities(persistent) are detected in the FortiGate UTM Appliance Application. Remote attackers & low privileged user accounts can inject (persistent) own malicious script code to manipulate specific customer/admin requests. Affected Products: ==================...
7.2AI Score
7.1AI Score
0.3AI Score
Fortigate UTM WAF Appliance - Multiple Vulnerabilities
Fortigate UTM WAF Appliance - Multiple...
0.3AI Score
7.4AI Score
0.2AI Score
7.1AI Score
0.2AI Score
Exploit Title: Mihalism Multi Host v 5.0
Exploit Title: Mihalism Multi Host v 5.0 Google Dork: intext:"powered by Mihalism Multi Host" Date: 2012/8/25 Discovered By : Explo!ter Software Link: http://www.mihalismscript.com/ Version: 5.0 Tested on: Linux Contact : Emperor-team.org Spt to : Stokke Details : ++++++++++++++++++++++++++ the...
-0.2AI Score
7.1AI Score
0.4AI Score
Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability
Title: Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability Date: 2012-05-29 References: http://www.blackboard.com/Platforms/Learn/Overview.aspx VL-ID: 580 Common Vulnerability Scoring System: 3.5 Introduction: Blackboard Learn technology helps you make learning more effective in and beyond....
0.2AI Score
-0.5AI Score
ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability EMC Identifier: ESA-2012-027 CVE Identifier: CVE-2012-2282 Severity Rating: CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:S/C:C/I:C/A:C) Affected products: EMC Celerra Network Server...
2AI Score
0.002EPSS
Unibody Memory Analysis -- Introducing Memoryze™ for the Mac 1.0
Today, Mandiant is introducing a new free tool, Memoryze™ for the Mac 1.0, which brings memory imaging and analysis to the Mac. It joins a growing list of freeware tools Mandiant currently provides. Memoryze™ for the Mac 1.0 brings many of the features of Memoryze™ to the Apple Macintosh platform.....
-0.6AI Score
Threat Outbreak Alert: Fake DHL Express Tracking Notification Email Messages on February 3, 2014
Medium Alert ID: 26262 First Published: 2012 June 27 20:46 GMT Last Updated: 2014 February 4 13:56 GMT Version: 26 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a DHL Express tracking notification for the recipient. The text in...
-0.4AI Score
0.2AI Score
7.1AI Score
7.1AI Score
0.1AI Score
7.1AI Score
-0.1AI Score
7.1AI Score
7.1AI Score
7.1AI Score
AI Score
7.1AI Score
-0.2AI Score
Medium Alert ID: 25717 First Published: 2012 April 20 16:52 GMT Last Updated: 2015 May 12 14:46 GMT Version: 70 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parcel delivery failure notification for the recipient. The text in...
0.3AI Score
Mini-stream Ripper [.m3u] 3.1.3.2 buffer overflow vulnnerability
Exploit for windows platform in category local...
6.8AI Score
7.1AI Score
7.1AI Score
-0.1AI Score