seL4 Secure Microkernel Made Open Source

General Dynamics C4 Systems and Australia’s Information and Communications Technology Research Centre NICTA today open sourced the code-base of a secure microkernel project known as seL4. Touted as “the most trustworthy general purpose microkernel in the world,” seL4 has previously been adapted b...

[SE-2014-01] Security vulnerabilities in Oracle Database Java VM

Hello All, Security Explorations discovered multiple security issues in the implementation of a Java VM embedded in Oracle Database software 1. Discovered security issues violate many "Secure Coding Guidelines for the Java Programming Language" 2. Most of them demonstrate a well known problem...

w3af - Open Source Web Application Security Scanner

w3af , is a Web Application Attack and Audit Framework. The w3af core and it’s plugins are fully written in python, it identifies more than 200 vulnerabilities and reduce your site’s overall risk exposure. Identify vulnerabilities like SQL Injection, Cross-Site Scripting, Guessable credentials,...

CVE-2013-6690: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

Cisco Releases Security Advisory

Cisco has released a security advisory to address a vulnerability in the web framework of Cisco Prime Central for Hosted Collaboration Solution HCS Assurance. This vulnerability could allow an unauthenticated, remote attacker to access sensitive information on the system, including user...

Design/Logic Flaw

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600...

CVE-2013-3473

CVE-2013-3473 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance prior to 9.1.1. The issue is improper session handling: the web framework does not reliably determine an authenticated session, enabling unauthenticated remote attackers to enumerate usernames and password...

PT-2013-4423

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS Assurance versions prior to 9.1.1 Description The issue is related to the web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance, which does not properly...

CVE-2013-3473: Improper Authentication

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600...

CVE-2013-3388

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776...

CVE-2013-3387

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service disk consumption via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724...

Design/Logic Flaw

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776...

Code injection

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service disk consumption via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724...

Code injection

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 1 61615 or 2 61616, aka Bug ID CSCtz90114...

Memory corruption

Memory leak in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets, aka Bug ID CSCub59158...

CVE-2013-3389

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 1 61615 or 2 61616, aka Bug ID CSCtz90114...

CVE-2013-3388

Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) is affected by a denial-of-service vulnerability that allows remote attackers to cause memory consumption by flooding TCP port 44444. The issue is confirmed in multiple sources (e.g., Cisco advisory ci...

CVE-2013-3387

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service disk consumption via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724...

CVE-2013-3389

CVE-2013-3389 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1). The vulnerability allows remote attackers to cause a denial of service through a flood of TCP traffic to ports 61615 or 61616, leading to memory consumption. This is tied to Bug ...

CVE-2013-3387

Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) is affected by CVE-2013-3387. The vulnerability allows remote attackers to cause a denial of service (disk consumption) by flooding TCP port 5400, producing large error-log files (Bug ID CSCua42724). A...