PT-2012-3864

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.5 Description A session fixation issue allows remote attackers to hijack web sessions. The estimated number of potentially affected devices worldwide is not specified. Details about real-world...

PT-2012-2809

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. This affects products used in SmartCloud Control Desk...

PT-2012-4645

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This affects products including SmartCloud Control Desk,...

PT-2012-2838

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be done via unspecified vectors, potentially leading to unauthorized data access or...

PT-2012-3863

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Description A session fixation issue allows remote attackers to hijack web sessions. The estimated number of potentially affected devices and details about real-world incidents are not...

Two Microsoft Security Updates Await In Advance of Certificate Key Length Changes

Microsoft is promising a light load of security updates for next Tuesday’s monthly patch release in an attempt to give Windows administrators and security teams time to prepare for an October change to certificate key length requirements. Angela Gunn of Microsoft’s Security Response Team announce...

Fedora Update for glpi-data-injection FEDORA-2012-10661

Check for the Version of glpi-data-injection OpenVAS Vulnerability Test Fedora Update for glpi-data-injection FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Important: Red Hat Security Advisory: katello security update

Updated katello packages that fix one security issue are now available for Red Hat Subscription Asset Manager. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

10 Tips for Getting Started With Security Metrics

It’s becoming evident that security practitioners have to take on a metrics mentality to improve security operations, reduce risks and better advise their critical decisions. There are several steps an organization can take to ensure that they are on the right path. There are some must-haves that...

Novell ZENworks Asset Management - Remote Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Apache-Coyote/ include...

Novell ZENworks Asset Management Remote Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Apache-Coyote/ include...

Novell ZENworks Asset Management Remote Execution

Exploit for java platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

[SECURITY] Fedora 17 Update: glpi-data-injection-2.2.2-1.fc17

Plugin for importing data into GLPI It'll can serve, for example, to : - import machines at the delivery electronic delivery order in CSV - import additional data - import equipment not managed by OCS - transmit from an other tool of asset management...

sos security, bug fix, and enhancement update

2.2-29.0.1.el6 - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 - Disable --upload option as it will not work with Oracle support - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 - Remove RH ftp URL and support email - add...

WordPress Asset Manager 0.2 File Upload

File upload vulnerability in WordPress Asset Manager plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Asset Manager Plugin 0.2 'upload.php' Arbitrary File Upload Vulnerability - Active Check

WordPress Asset Manager Plugin is prone to a file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Asset Manager 0.2 Shell Upload

Description : Wordpress Plugins - Asset Manager Shell Upload Vulnerability Version : 0.2 Link : http://wordpress.org/extend/plugins/asset-manager/ Plugins : http://downloads.wordpress.org/plugin/asset-manager.0.2.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/asset-manager/ Author ...

WordPress Asset Manager Plugin 0.2 - Arbitrary File Upload

WordPress Asset Manager plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation. Solution Update the plugin...

WordPress Plugin Asset Manager 0.2 - Arbitrary File Upload

WordPress Plugin Asset Manager 0.2 - Arbitrary File Upload Description : Wordpress Plugins - Asset Manager Shell Upload Vulnerability Version : 0.2 Link : http://wordpress.org/extend/plugins/asset-manager/ Plugins : http://downloads.wordpress.org/plugin/asset-manager.0.2.zip Date : 26-05-2012...

Wordpress Asset Manager Plugin 0.2 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Asset Manager Shell Upload Vulnerability Version : 0.2 Link : http://wordpress.org/extend/plugins/asset-manager/ Plugins : http://downloads.wordpress.org/plugin/asset-manager.0.2.zip Date : 26-05-2012 Google...