Cybersecurity czar position, 60-day review report coming this week

From The Washington Post Ellen Nakashima The Obama administration is set to announce the creation of a new high-level position to run the cybersecurity program for the country. The announcement is expected on Friday, along with the release of the report on the administration’s 60-day review of th...

[Full-disclosure] Drupal 6 CCK Module XSS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor Notified: 05/18/09 Vendor Response: Karoly Negyesi of Drupal security denies issue exists. Drupal security has responded to reports of CCK based XSS vulnerabilities in past with http://drupal.org/node/372836, which basically shirks the issue...

Counterpoint: The need for a cybersecurity czar is real

As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...

Nortel Contact Center Manager - Administration Password Disclosure

Nortel Contact Center Manager - Administration Password Disclosure source: https://www.securityfocus.com/bid/34964/info Nortel Contact Center Manager Administration is prone to a password-disclosure vulnerability caused by a design error. Attackers can exploit this issue to gain access to the...

Nortel Contact Center Manager - Administration Password Disclosure

source: https://www.securityfocus.com/bid/34964/info Nortel Contact Center Manager Administration is prone to a password-disclosure vulnerability caused by a design error. Attackers can exploit this issue to gain access to the 'sysadmin' password. Successfully exploiting this issue may lead to...

Klinzmann A-A-S XSRF / Code Execution

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

Do we really need a cybersecurity czar?

The back-and-forth in Washington over who should run the cybersecurity program for the federal government has reached a fever pitch, as lawmakers, federal agencies and other interested parties jockey for position and budget dollars in the run-up to the release of the results of the Obama...

A A S Application Access Server Server Detection

The A A S Application Access Server is running at this port. The A A S Application Access Server makes the PC administration possible over LAN and WANs. OpenVAS Vulnerability Test $Id: aasdetect.nasl 6032 2017-04-26 09:02:50Z teissa $ A A S Application Access Server Detection Authors: Michael Mey...

The Recipe Script version 5 (Auth Bypass) Remote Sql Injecion

No description provided by source. ----------------------------------------------------- The Recipe Script version 5 Auth Bypass Remote Sql Injecion/ Database Backup Exploit ----------------------------------------------------- Founder: TiGeR-Dz script:The Recipe Script version 5...

The Recipe Script 5 (Auth Bypass) SQL Injection / DB Backup Vulns

No description provided by source. ----------------------------------------------------- The Recipe Script version 5 Auth Bypass Remote Sql Injecion/ Database Backup Exploit ----------------------------------------------------- Founder: TiGeR-Dz script:The Recipe Script version 5...

The Recipe Script 5 - Authentication Bypass Database Backup

The Recipe Script 5 - Authentication Bypass Database Backup ----------------------------------------------------- The Recipe Script version 5 Auth Bypass Remote Sql Injecion/ Database Backup Exploit ----------------------------------------------------- Founder: TiGeR-Dz script:The Recipe Script...

The Recipe Script 5 - Authentication Bypass / Database Backup

----------------------------------------------------- The Recipe Script version 5 Auth Bypass Remote Sql Injecion/ Database Backup Exploit ----------------------------------------------------- Founder: TiGeR-Dz script:The Recipe Script version 5 downlaod:http://recipescript.com/...

Oracle GlassFish Server Administration Console Default Credentials

It is possible to log into the remote Oracle GlassFish administration console by providing default credentials. Knowing these, an attacker can gain administrative control of the affected application server and, for example, install hostile applets. %NASLMINLEVEL 70300 C Tenable Network Security,...

HP-UX Update for System Administration Manager (SAM) HPSBUX02286

Check for the Version of System Administration Manager SAM OpenVAS Vulnerability Test HP-UX Update for System Administration Manager SAM HPSBUX02286 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

HP-UX Update for System Administration Manager (SAM) HPSBUX01104

Check for the Version of System Administration Manager SAM OpenVAS Vulnerability Test HP-UX Update for System Administration Manager SAM HPSBUX01104 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

HP-UX Update for System Administration Manager (SAM) HPSBUX01104

Check for the Version of System Administration Manager SAM OpenVAS Vulnerability Test HP-UX Update for System Administration Manager SAM HPSBUX01104 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

HP-UX Update for Netscape NSS Library Suite SSLv2 HPSBUX01070

Check for the Version of Netscape NSS Library Suite SSLv2 OpenVAS Vulnerability Test HP-UX Update for Netscape NSS Library Suite SSLv2 HPSBUX01070 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

HP-UX Update for System Administration Manager (SAM) HPSBUX02286

Check for the Version of System Administration Manager SAM OpenVAS Vulnerability Test HP-UX Update for System Administration Manager SAM HPSBUX02286 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

GlassFish Enterprise Server 2.1 - Admin Console /configuration/configuration.jsf URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potential...