CVE-2011-4159

Unspecified vulnerability in System Administration Manager SAM in EMS before A.04.20.11.0401 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

Code injection

Unspecified vulnerability in System Administration Manager SAM in EMS before A.04.20.11.0401 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2011-4159

HP-UX SAM vulnerability (CVE-2011-4159) affects HP-UX B.11.11, B.11.23 and B.11.31 with EMS prior to A.04.20.11.04_01. Local privilege escalation via unspecified vectors is described; HP’s Security Bulletin HPSBUX02724 rev.2 lists affected EMS releases and unreleased official patches in the form ...

CVE-2011-4159

Unspecified vulnerability in System Administration Manager SAM in EMS before A.04.20.11.0401 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

ARASTAR - SQL Injection

++ |o ID | ++ + Title : ARASTAR SQL Injection Vulnerability + Affected Version : ALL VERSIONS + Software Link : http://ara-star.com/art.php?ID=172 + Tested on : Windows XP SP2 + Date : 18/11/2011 + Dork : inurl:'.co.il/Cat.php?ID=' intext:"POWERED BY ARASTAR" + Category : Content Management +...

[SECURITY] Fedora 14 Update: ocsinventory-1.3.3-5.fc14

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.7-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index =3D es, users, permissions, while you still have the ability to...

[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.7-1.fc14

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index =3D es, users, permissions, while you still have the ability to...

PT-2011-40: Multiple CSRF vulnerabilities in Citrix License Administration Console

Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix License Administration Console. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...

PT-2011-41: Stored XSS vulnerability in Citrix License Administration Console

Positive Research Center has discovered a Stored XSS vulnerability in Citrix License Administration Console. Since special characters in usernames are not properly escaped, a stored XSS attack is possible. How to fix Update your software up to the latest version Advisory status 10.11.2011 - Vendo...

Dell KACE K2000 Appliance database administration account allows arbitrary command execution

Overview The Dell KACE K2000 System Deployment Appliance contains a vulnerability that could allow a remote attacker to execute arbitrary commands on an affected device. Description The Dell KACE K2000 Deployment Appliance is an integrated systems provisioning product for large-scale operating...

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94228 Diese Prüfung bezieht sich auf die 12...

IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware

IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94226 Diese Prüfung bezieht sich auf die 12...

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94228 Diese Prüfung bezieht sich auf die 12...

Cisco Small Business SRP500 crossite request forgery

Crossite request forgery in administration interface...

Government's Cloud Audit Program Falls Behind Schedule

In a speech on Wednesday, Federal Chief Information Officer Steven VanRoekel said that a federal plan for qualifying and providing security audits on private sector cloud providers will become mandatory for any agency that wanted to contact with third party cloud providers, according to a report ...

[SECURITY] Fedora 14 Update: perl-5.12.4-147.fc14

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Google App Enging SDK Code Execution Vulnerability (CVE 2011-1364)

We recently identified an interesting code execution vulnerability in the Google App Engine SDK for Python. By combining a CSRF vulnerability in the administration web UI, with some other unique vulnerabilities we found in the Google python libraries, a remote hacker could gain remote code...

CVE-2011-2310

Unspecified vulnerability in the Oracle Waveset component in Oracle Sun Products Suite 8.1.0 and 8.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to User Administration...