Oracle Java GlassFish Server Security Bypass Vulnerability (May 2011)

Oracle GlassFish Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sybase M-Business Anywhere (AvantGo) SOAP Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...

DHS Cybersecurity Chief Reitinger Stepping Down

Philip Reitinger, the top information security official at the Department of Homeland Security, is going to step down from his post at the beginning of June, just a couple of weeks after the Obama administration laid out the details of its latest strategy to improve the country’s online defenses...

Obama Administration Lays Out New U.S. Cyberspace Strategy

The Obama administration has unveiled a sweeping strategy for the way that it plans to conduct the country’s business and political dealings online in the coming years, and much of the plan centers on improving the security and reliability of the Internet. The International Strategy for Cyberspac...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Oracle GlassFish Server - Administration Console Authentication Bypass

Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL: http://www.coresecurity.com/content/glassfishadminauthenticationbypass Date published:...

kernel: CAP_SYS_MODULE bypass via CAP_NET_ADMIN

The devload function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAPSYSMODULE capability requirement and load arbitrary modules by leveraging the CAPNETADMIN capability...

kernel: ipv4: netfilter: arp_tables: fix infoleak to userspace

net/ipv4/netfilter/arptables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...

PT-2013-1385 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue allows local users to bypass an intended capability requirement, enabling them to load arbitrary modules. This is achieved by leveraging the CAP NET ADMIN capability in the dev load...

Clear (iSpot/Clearspot) Remote Command Execution Exploit

Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

"Real" Osama bin Laden Death Photos? Yeah, They're Fake, Too.

You’ve heard about the tidal wave of spam e-mail and scammy Web links that followed the killing of Osama bin Laden by U.S. Special Forces on Sunday. But what about the latest round of e-mails offering death photos of the slain terrorist leader? Well, turns out they’re fake, also. Security firm...

Kaspersky Administration Kit "SMBRelay"远程代码执行漏洞

BUGTRAQ ID: 47563 Kaspersky Administration Kit 是一套功能强大且弹性的工具，可集中管理企业网路所使用的卡巴斯基实验室安全内容管理解决方案。 Kaspersky Administration Kit由于"SMBRelay"攻击在实现上存在远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码。 Kaspersky Administration Kit 6中默认启用了"Scan IP...

up.time Software Administration Interface Remote Authentication Bypass Vulnerability

up.time software is prone to a remote authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication and perform unauthorized actions. up.time 5 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id: gbuptime47599.nasl 7029 2017-08-31...

up.time Software 5 - Administration Interface Remote Authentication Bypass

up.time Software 5 - Administration Interface Remote Authentication Bypass source: https://www.securityfocus.com/bid/47599/info up.time software is prone to a remote authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication and perform unauthorized actions...

Report: UK Firm Offered Custom Malware to Egyptian Security Services

Documents spilled into public by the political unrest in Egypt in recent months has shone a spotlight on the shadowy world of for-profit, custom malware creation for governments around the world. The anti malware firm F-Secure first called attention to documents uncovered by protesting Egyptians...

Kaspersky administration Kit SMB relaying attack

Network is automatically scanned and hosts found are automatically connected via SMB with administrative permissions, making it possible SMB relaying attack...

Re: [DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRelay

It was closed only for relayng to the same host but it is imposible to close relayng on another host which run processes st the same account. And also smbrelay patch did not work on clusters http://dsecrg.blogspot.com/2011/01/passthehash-bible-1-attacking.html...

[DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRelay

Digital Security Research Group DSecRG Advisory DSECRG-11-018 Application: Kaspersky Administration Kit Versions Affected: from 6.0 Vendor URL: http://www.kaspersky.com Bug: Design flaw Exploits: YES Reported: 22.01.2011 Vendor response: 22.01.2011 Solution: disable IP scan Date of Public Advisor...

[SECURITY] Fedora 13 Update: perl-5.10.1-123.fc13

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Oracle GlassFish/System Application Server Security Bypass Vulnerability

The host is running GlassFish/System Application Server and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gboracleglassfishnsjassecbypassvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Oracle GlassFish/System Application Server Security Bypass Vulnerability Authors: Antu...